A method for preventing misuse of an electronic access permission, which is manageable with a mobile electronic device using a mobile device application, the electronic access permission being transmitted to the mobile electronic device by an access permission server controlling an initial creation of the electronic access permission as well as any subsequent transfer of the electronic access permission, the method comprising:
- receiving at the access permission server, during the initial creation of the electronic access permission, a first mobile electronic device ID;
- generating an ID associated with the electronic access permission;
- associating the ID of the electronic access permission with the unique ID of the first mobile electronic device;
- transmitting the electronic access permission to the first mobile electronic device for management in the mobile device application in response to associating the first mobile electronic device ID with the ID of the electronic access permission;
- and
- following transmission of the electronic access permission to the first mobile electronic device, processing a transfer request for transferring the electronic access permission from the first mobile electronic device to a second mobile electronic device, the processing comprising:
- receiving, from the first mobile electronic device, first verification information associated at least with approval by the first mobile electronic device to transfer the electronic access permission;
- receiving a request for the electronic access permission from the second mobile electronic device in response to the second mobile electronic device receiving the ID of the electronic access permission from the first mobile electronic device, wherein the request includes a unique ID of the second mobile electronic device;
- verifying at the access permission server that the ID of the electronic access permission is associated with the unique ID of a mobile electronic device different than the second mobile electronic device;
- requesting by the access permission server that the second mobile electronic device provide second verification information associated with transfer approval by the first mobile electronic device;
- determining that the second verification information provided by the second mobile electronic device is validated in comparison to the first mobile electronic device;
- in response to validating the second verification information from the second mobile electronic device, associating the ID of the electronic access permission with the unique ID of the second mobile electronic device;
- transmitting the electronic access permission to the second mobile electronic device for management through a mobile device application of the second mobile electronic device;
- and
- invalidating the electronic access permission on the first mobile electronic device by means of a message from the access permission server to the first mobile electronic device and deleting on the access permission server, the association between the electronic access permission and the first mobile electronic device.