Back to results
US 9,807,096 B2Granted
Controlled token distribution to protect against malicious data and resource access
AssigneeLive Nation Entertainment, Inc.
InventorsPhillip Volini, John Raymond Werneke, Carl Schumaier
Life of this patent
Estimating the term…
Abstract
Techniques are described for controlling data and resource access. For example, methods and systems can facilitate controlled token distribution across systems and token processing in a manner so as to limit access to and to protect data that includes access codes.
Claims18
A system for generating and transmitting tokens for processing communications received from other devices over a network, the system comprising:
- a communication engine that:
- receives a first communication from a second system, the first communication being associated with a credential and having been transmitted by the second system over a wireless network;
- transmits a second communication over the wireless network to the second system at a first time, the second communication including a token;
- receives a third communication from the second system, the third communication including the token and being received at a second time that is after the first time;
- and
- in response to a determination that the token corresponds to the second system, transmits a fourth communication to the second system or to a third system, the fourth communication including an access-enabling code corresponding to an access right for a resource;
- an authentication engine that authenticates the credential, the authentication indicating that an entity associated with the second system is authorized to receive secure tokens for facilitating resource access;
- a resource-access allocation engine that:
- determines that the access right is available, wherein the fourth communication is transmitted in response to determining that the token corresponds to the second system and that an access right for the resource is available;
- and
- updates an access-code data store to change an availability status of the access right;
- wherein the token engine further updates an access-code data store to change an availability status of the access right;
- a token engine that:
- in response to the authentication, generates the token, the token being generated based on or to correspond with each of:
- the entity and the resource;
- identifies that the resource corresponds to the token;
- and
- determines that the token corresponds to the second system.
15 more elements
A computer-implemented method for generating and transmitting tokens for processing communications received from other devices over a network, the method comprising:
- receiving, at a first system and over a wireless network, a first communication from a second system, the first communication being associated with a credential;
- authenticating, at the first system, the credential, the authentication indicating that an entity associated with the second system is authorized to receive secure tokens for facilitating resource access;
- in response to the authentication, generating, at the first system, a token, the token being generated based on or to correspond with each of:
- the entity and a resource;
- transmitting, from the first system and over the wireless network, a second communication to the second system at a first time, the second communication including the token;
- receiving, at the first system, a third communication from the second system, the third communication including the token and being received at a second time that is after the first time;
- identifying, at the first system, that the resource corresponds to the token;
- determining that the token corresponds to the second system;
- in response to determining that the token corresponds to the second system, transmitting a fourth communication to the second system or to a third system, the fourth communication including an access-enabling code corresponding to an access right for the resource;
- determining that the access right is available, wherein the fourth communication is transmitted in response to determining that the token corresponds to the second system and that the access right for the resource is available;
- updating a token data store to indicate that the token has been used;
- and
- updating an access-code data store to change an availability status of the access right.
10 more elements
A computer-program product tangibly embodied in a non-transitory machine-readable storage medium, including instructions configured to cause one or more data processors to perform actions including:
- detecting that a first communication has been received at a first system from a second system, the first communication being associated with a credential;
- authenticating the credential, the authentication indicating that an entity associated with the second system is authorized to receive secure tokens for facilitating resource access;
- in response to the authentication, generating a token, the token being generated based on or to correspond with each of:
- the entity and a resource;
- generating a second communication to be transmitted to the second system at a first time, the second communication including the token;
- detecting that a third communication has been received from the second system, the third communication including the token and having been received at a second time that is after the first time;
- identifying that the resource corresponds to the token;
- determining that the token corresponds to the second system;
- in response to determining that the token corresponds to the second system, generating a fourth communication to be transmitted to the second system or to a third system, the fourth communication including an access-enabling code corresponding to an access right for the resources;
- determining that the access right is available, wherein the fourth communication is transmitted in response to determining that the token corresponds to the second system and that the access right for the resource is available;
- updating a token data store to indicate that the token has been used;
- and
- updating an access-code data store to change an availability status of the access right.
10 more elements
Dependencies are inferred from the claim text.