# US 2018/0025295 A1 · System and method for using unique device identifiers to enhance security > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2018/0025295 A1 - Document ID: US20180025295A1 - Status: Published application - Kind: A1 - Application number: 15/682,271 - Filed: 2017-08-21 - Published: 2018-01-25 - Earliest claimed: 2016-07-20 - Assignees: Live Nation Entertainment, Inc. - Applicants: Live Nation Entertainment, Inc. - Inventors: Samuel Levin; David Scarborough; Fengpei Du; Richard DiStefano; Dennis Denker; Sean Moriarty; Charles Plamondon; Matthew Siegel; Benjamin Marti - Web page: https://patentgrep.com/patent/US20180025295A1 ## CPC - G06Q 10/02: Reservations, e.g. for tickets, services or events - G06K 5/00: Methods or arrangements for verifying the correctness of markings on a record carrier; Column detection devices - G06K 7/10722: {Photodetector array or CCD scanning} - G06K 7/1417: {2D bar codes} - G06Q 10/00: Administration; Management - H04W 4/80: Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication - H04W 76/11: Allocation or use of connection identifiers - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - G06K: GRAPHICAL DATA READING (image or video recognition or understanding G06V); PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A method for detection and use of device identifiers to enhance the security of data transfers between electronic devices. A first electronic device can transmit access data to a second electronic device. The access data can be associated with a first access code that can be generated based at least in part on data representing a device identifier of the first electronic device. A device identifier can uniquely identify the first electronic device from a plurality of electronic devices. Transferring the access data can involve transforming the first access code into a second access code that can include data representing a device identifier associated with the second electronic device. Transforming the first access code into the second access code can facilitate access to a resource associated with the access data for a second user, but not for a first user. ## Claims ### Claim 1 A computer-implemented method for detecting and using unique device identifiers to enhance security of access-right retrieval, the method comprising: receiving a communication from a mobile device associated with a user, the communication corresponding to a first request to retrieve access-right data associated with the user, the access-right data corresponding to one or more access rights to a resource; accessing metadata associated with the user, the metadata including one or more data fields; identifying a data field of the one or more data fields included in the metadata; extracting a value included in the data field, the value representing a device identifier that uniquely identifies the mobile device from amongst a plurality of mobile devices, the device identifier corresponding to a device characteristic of the mobile device; generating an access code corresponding to the one or more access rights, at least a portion of the access code including a representation of the device identifier; transmitting the access code to the mobile device; receiving, at a computing device associated with the resource, a second request to access the resource using the one or more access rights, the second request being transmitted from the mobile device to the computing device using a near-field communication channel; determining whether the access code is valid, the determination including querying one or more databases to determine whether the access code is stored in the one or more databases; and in response to determining that the access code is valid, granting the mobile device access to the resource. ### Claim 2 (depends on 1) The computer-implemented method of claim 1, wherein the second request corresponds to a request to facilitate entry to a spatial area associated with the resource, the second request including the access code and the device identifier of the mobile device. ### Claim 3 (depends on 1) The computer-implemented method of claim 1, wherein receiving the second request includes receiving the access code at the computing device from the mobile device over the near-field communication channel. ### Claim 4 (depends on 1) The computer-implemented method of claim 1, wherein the device identifier includes at least one of a media access control (MAC) address, an organizationally unique identifier, a globally unique identifier, a universally unique identifier, identity correlation, or a World Wide Port Name. ### Claim 5 (depends on 1) The computer-implemented method of claim 1, further comprising: transforming the access code by replacing at least part of the access code with a representation of another device identifier, wherein the transformation is performed when the one or more access rights are transferred. ### Claim 6 (depends on 1) The computer-implemented method of claim 1, further comprising: authenticating, using the device identifier, that the second request is received from the mobile device. ### Claim 7 (depends on 6) The computer-implemented method of claim 6, wherein authenticating further comprises: transmitting visual data to the mobile device, the visual data corresponding to a prompt for biometric data from the user. ### Claim 8 A system, comprising: one or more data processors; and a non-transitory computer-readable storage medium containing instructions which, when executed on the one or more data processors, cause the one or more data processors to perform operations including: receiving a communication from a mobile device associated with a user, the communication corresponding to a first request to retrieve access-right data associated with the user, the access-right data corresponding to one or more access rights to a resource; accessing metadata associated with the user, the metadata including one or more data fields; identifying a data field of the one or more data fields included in the metadata; extracting a value included in the data field, the value representing a device identifier that uniquely identifies the mobile device from amongst a plurality of mobile devices, the device identifier corresponding to a device characteristic of the mobile device; generating an access code corresponding to the one or more access rights, at least a portion of the access code including a representation of the device identifier; transmitting the access code to the mobile device; receiving, at a computing device associated with the resource, a second request to access the resource using the one or more access rights, the second request being transmitted from the mobile device to the computing device using a near-field communication channel; determining whether the access code is valid, the determination including querying one or more databases to determine whether the access code is stored in the one or more databases; and in response to determining that the access code is valid, granting the mobile device access to the resource. ### Claim 9 (depends on 8) The system of claim 8, wherein the second request corresponds to a request to facilitate entry to a spatial area associated with the resource, the second request including the access code and the device identifier of the mobile device. ### Claim 10 (depends on 8) The system of claim 8, wherein receiving the second request includes receiving the access code at the computing device from the mobile device over the near-field communication channel. ### Claim 11 (depends on 8) The system of claim 8, wherein the device identifier includes at least one of a media access control (MAC) address, an organizationally unique identifier, a globally unique identifier, a universally unique identifier, identity correlation, or a World Wide Port Name. ### Claim 12 (depends on 8) The system of claim 8, further comprising: transforming the access code by replacing at least part of the access code with a representation of another device identifier, wherein the transformation is performed when the one or more access rights are transferred. ### Claim 13 (depends on 8) The system of claim 8, further comprising: authenticating, using the device identifier, that the second request is received from the mobile device. ### Claim 14 (depends on 13) The system of claim 13, wherein authenticating further comprises: transmitting visual data to the mobile device, the visual data corresponding to a prompt for biometric data from the user.r. ### Claim 15 A computer-program product tangibly embodied in a non-transitory machine-readable storage medium, including instructions configured to cause a data processing apparatus to perform operations including: receiving a communication from a mobile device associated with a user, the communication corresponding to a first request to retrieve access-right data associated with the user, the access-right data corresponding to one or more access rights to a resource; accessing metadata associated with the user, the metadata including one or more data fields; identifying a data field of the one or more data fields included in the metadata; extracting a value included in the data field, the value representing a device identifier that uniquely identifies the mobile device from amongst a plurality of mobile devices, the device identifier corresponding to a device characteristic of the mobile device; generating an access code corresponding to the one or more access rights, at least a portion of the access code including a representation of the device identifier; transmitting the access code to the mobile device; receiving, at a computing device associated with the resource, a second request to access the resource using the one or more access rights, the second request being transmitted from the mobile device to the computing device using a near-field communication channel; determining whether the access code is valid, the determination including querying one or more databases to determine whether the access code is stored in the one or more databases; and in response to determining that the access code is valid, granting the mobile device access to the resource. ### Claim 16 (depends on 15) The computer-program product of claim 15, wherein the second request corresponds to a request to facilitate entry to a spatial area associated with the resource, the second request including the access code and the device identifier of the mobile device. ### Claim 17 (depends on 15) The computer-program product of claim 15, wherein receiving the second request includes receiving the access code at the computing device from the mobile device over the near-field communication channel. ### Claim 18 (depends on 15) The computer-program product of claim 15, wherein the device identifier includes at least one of a media access control (MAC) address, an organizationally unique identifier, a globally unique identifier, a universally unique identifier, identity correlation, or a World Wide Port Name. ### Claim 19 (depends on 15) The computer-program product of claim 15, further comprising: transforming the access code by replacing at least part of the access code with a representation of another device identifier, wherein the transformation is performed when the one or more access rights are transferred. ### Claim 20 (depends on 15) The computer-program product of claim 15, further comprising: authenticating, using the device identifier, that the second request is received from the mobile device.