System and method for using unique device identifiers to enhance security

A system, comprising:

• one or more data processors;
• and
• a non-transitory computer-readable storage medium containing instructions which, when executed on the one or more data processors, cause the one or more data processors to perform operations including:
• receiving a communication from a mobile device associated with a user, the communication corresponding to a first request to retrieve access-right data associated with the user, the access-right data corresponding to one or more access rights to a resource;
• accessing metadata associated with the user, the metadata including one or more data fields;
• identifying a data field of the one or more data fields included in the metadata;
• extracting a value included in the data field, the value representing a device identifier that uniquely identifies the mobile device from amongst a plurality of mobile devices, the device identifier corresponding to a device characteristic of the mobile device;
• generating an access code corresponding to the one or more access rights, at least a portion of the access code including a representation of the device identifier;
• transmitting the access code to the mobile device;
• receiving, at a computing device associated with the resource, a second request to access the resource using the one or more access rights, the second request being transmitted from the mobile device to the computing device using a near-field communication channel;
• determining whether the access code is valid, the determination including querying one or more databases to determine whether the access code is stored in the one or more databases;
• and
• in response to determining that the access code is valid, granting the mobile device access to the resource.

A computer-program product tangibly embodied in a non-transitory machine-readable storage medium, including instructions configured to cause a data processing apparatus to perform operations including:

• receiving a communication from a mobile device associated with a user, the communication corresponding to a first request to retrieve access-right data associated with the user, the access-right data corresponding to one or more access rights to a resource;
• accessing metadata associated with the user, the metadata including one or more data fields;
• identifying a data field of the one or more data fields included in the metadata;
• extracting a value included in the data field, the value representing a device identifier that uniquely identifies the mobile device from amongst a plurality of mobile devices, the device identifier corresponding to a device characteristic of the mobile device;
• generating an access code corresponding to the one or more access rights, at least a portion of the access code including a representation of the device identifier;
• transmitting the access code to the mobile device;
• receiving, at a computing device associated with the resource, a second request to access the resource using the one or more access rights, the second request being transmitted from the mobile device to the computing device using a near-field communication channel;
• determining whether the access code is valid, the determination including querying one or more databases to determine whether the access code is stored in the one or more databases;
• and
• in response to determining that the access code is valid, granting the mobile device access to the resource.