Back to results
US 12,750,203 B2Granted
Systems and methods for securing access rights to resources using cryptography and the blockchain
AssigneeLive Nation Entertainment, Inc.
InventorAdam Meghji
Life of this patent
Estimating the term…
Abstract
The present disclosure generally relates to securing access to resource and access rights using cryptography and the blockchain. Certain embodiments of the present disclosure generally relate to systems and methods that enhance the security of resource access using hierarchical deterministic (HD) cryptography and the blockchain. Certain embodiments of the present disclosure relate to systems and methods that securely and anonymously represent the identity of a user and the user's access code data on a distributed ledger represented across the blockchain.
Claims19
A computer-implemented method for controlling access to a resource, comprising:
- retrieving, by a server, one or more sensitive data items from a private database, each of the one or more sensitive data items being capable of uniquely identifying a user device;
- inputting the one or more sensitive data items into one or more cryptography algorithms by a hierarchical deterministic (HD) crypto system;
- deriving a first private key and a first public key in response to inputting the one or more sensitive data items into the one or more cryptography algorithms;
- inputting a resource-specific identifier into the one or more cryptography algorithms by the HD crypto system;
- deriving a child public key and a child private key from the first private key in response to inputting the resource-specific identifier into the one or more cryptography algorithms, wherein the child private key is stored in an access control list (ACL) device;
- generating an anonymous address from the child public key using a data-truncation technique;
- retrieving an access code associated with the resource in response to deriving the child public;
- encrypting the access code with the child public key;
- publishing the anonymous address and the encrypted access code on a distributed ledger without exposing the one or more sensitive data items;
- determining that the user device is within a defined proximity of the ACL device;
- retrieving the child private key from the ACL device, wherein the ACL device is present at a spatial area associated with the resource;
- decrypting the access code by the retrieved child private key;
- retrieving the anonymous address from the user device entering the spatial area associated with the resource;
- querying the distributed ledger using the retrieved anonymous address;
- granting entry to the user device in the spatial area on determining the anonymous address of the user device is associated with the decrypted access code;
- and
- prohibiting the entry to the user device in the spatial area on determining the anonymous address of the user device is not associated with the decrypted access code.
14 more elements
A system for controlling access to a resource, comprising:
- one or more processors;
- and
- a non-transitory computer-readable storage medium containing instructions which, when executed on the one or more processors, cause the one or more processors to perform operations including:
- retrieving, by a server, one or more sensitive data items from a private database, each of the one or more sensitive data items being capable of uniquely identifying a user device;
- inputting, by a hierarchical deterministic (HD) crypto system, the one or more sensitive data items into one or more cryptography algorithms;
- deriving a first private key and a first public key in response to inputting the one or more sensitive data items into the one or more cryptography algorithms;
- inputting, by the hierarchical deterministic (HD) crypto system, a resource-specific identifier into the one or more cryptography algorithms;
- deriving a child public key and a child private key from the first private key in response to inputting the resource-specific identifier into the one or more cryptography algorithms, wherein the child private key is stored in an access control list (ACL) device;
- generating an anonymous address from the child public key using a data-truncation technique;
- retrieving an access code associated with the resource in response to deriving the child public;
- encrypting the access code with the child public key;
- publishing the anonymous address and the encrypted access code on a distributed ledger without exposing the one or more sensitive data items;
- determining that the user device is within a defined proximity of the ACL device;
- retrieving the child private key from the ACL device, wherein the ACL device is present at a spatial area associated with the resource;
- decrypting the access code by the retrieved child private key;
- retrieving the anonymous address from the user device entering the spatial area associated with the resource;
- querying the distributed ledger using the retrieved anonymous address;
- granting entry to the user device in the spatial area on determining the anonymous address of the user device is associated with the decrypted access code;
- and
- prohibiting the entry to the user device in the spatial area on determining the anonymous address of the user device is not associated with the decrypted access code.
17 more elements
A computer-program product tangibly embodied in a non-transitory machine-readable storage medium, including instructions configured to cause a processing apparatus to perform operations including:
- retrieving, by a server, one or more sensitive data items from a private database, each of the one or more sensitive data items being capable of uniquely identifying a user device;
- inputting, by a hierarchical deterministic (HD) crypto system, the one or more sensitive data items into one or more cryptography algorithms;
- deriving a first private key and a first public key in response to inputting the one or more sensitive data items into the one or more cryptography algorithms;
- inputting, by the hierarchical deterministic (HD) crypto system, a resource-specific identifier into the one or more cryptography algorithms;
- deriving a child public key and a child private key from the first private key in response to inputting the resource-specific identifier into the one or more cryptography algorithms, wherein the child private key is stored in an access control list (ACL) device;
- generating an anonymous address from the child public key using a data-truncation technique;
- retrieving an access code associated with a resource in response to deriving the child public;
- encrypting the access code with the child public key;
- publishing the anonymous address and the encrypted access code on a distributed ledger without exposing the one or more sensitive data items;
- determining that the user device is within a defined proximity of the ACL device;
- retrieving the child private key from the ACL device, wherein the ACL device is present at a spatial area associated with the resource;
- decrypting the access code by the retrieved child private key;
- retrieving the anonymous address from the user device entering the spatial area associated with the resource;
- querying the distributed ledger using the retrieved anonymous address;
- granting entry to the user device in the spatial area on determining the anonymous address of the user device is associated with the decrypted access code;
- and
- prohibiting the entry to the user device in the spatial area on determining the anonymous address of the user device is not associated with the decrypted access code.
14 more elements
Dependencies are inferred from the claim text.