Location-based access to controlled access resources

A system comprising:

• at least one processor;
• a datastore storing state data records for client devices;
• and
• memory storing instructions that, when executed by the at least one processor, cause the system to perform operations including:
• receiving a query from a client device, the client device having a device identifier,
• determining that at least one resource responsive to the query is a controlled access resource,
• in response to determining that the query is associated with a recognized location for the controlled access resource:
• generating a link to the controlled access resource, and
• generating a state data record for the client device in the datastore, the state data including the client device identifier, a timestamp, and an association with the recognized location,
• in response to determining that the query is not associated with a recognized location:
• identifying an unexpired state data record in the datastore for the client device identifier,
• in response to identifying the unexpired state data record, generating a token and including the token in a link to the controlled access resource, the token including a random number, a timestamp, and licensed resource information from the state data record, and
• in response to failing to identify the state data record in the datastore for the client device identifier, generating a link without the token, and
• returning a search result for the query to the client device, the search result including the link to the resource,
• wherein the client device uses the link to the resource to request the resource from a controlled access server, the controlled access server configured to provide access to resources from requests associated with recognized locations.

A method comprising:

• receiving a request for a controlled access resource from a client device, the request having a location;
• determining that the location is not a recognized location;
• determining that the request includes a token, the token including a timestamp, a random number, and licensed resource information;
• determining that the token is not expired based on the timestamp;
• determining that a resource identified by the licensed resource information matches the requested resource;
• and
• providing the controlled access resource to the client device,
• wherein the client device would otherwise be denied access to the controlled access resource.