Systems and methods for providing temporary access credentials to access physical locations

Abstract

To provide an efficient user access and remove an unauthorized person from a physical location to secure safety of the location in electronic access control to the physical location.SOLUTION: A physical location access control system is configured to receive, via a network interface, a request to provide a temporary access right for a first physical location to a first user, the request providing an indication as to a first time period associated with the temporary access right. In response to determining that a requester has an access right to the first physical location for a second time period including the first time period, a temporary access token corresponding to the first time period is created and the requester's access right to access the first physical location for the first time period is disabled. The temporary access token is transmitted to a device associated with the first user, enabling the first user to access the first physical location during the first time period.SELECTED DRAWING: Figure 1A

Description

[Technical field]

[0001] (Incorporation by reference of priority application) Any foreign or domestic priority claims identified in the Application Data Sheet filed with this application All applications cited herein are incorporated by reference under 37 CFR 1.57. do.

[0002] (Copyright Notice) A portion of the disclosure of this patent document contains material that is subject to copyright protection. Copyright The parties hereby agree to the full disclosure of this patent document and / or any other patent documents contained in the U.S. Patent and Trademark Office patent files and / or records. or the facsimile reproduction by anyone of the patent disclosure, All other rights reserved.

[0003] The present disclosure generally relates to systems and methods for providing access to physical locations. do. [Background technology]

[0004] Description of Related Art Electronic access control to physical locations provides efficient user access while In ensuring the security of a place by excluding unauthorized persons from the place, It is becoming increasingly important. Summary of the Invention

[0005] The following presents a simplified version of one or more aspects in order to provide a basic understanding of the invention. A summary is provided. This summary is not an extensive overview of all contemplated aspects, but rather provides a summary of all aspects. To identify key or critical elements or to define the scope of any or all aspects. Its sole purpose is to provide a preliminary, more detailed explanation of the invention as presented below. 1 is an explanatory diagram illustrating some concepts of the above aspects in a simplified form.

[0006] One aspect of the present disclosure is to provide a method for communicating with a first physical location via a network interface. a request from a requester to provide a first user with temporary access to a receiving a request from a requester providing an indication regarding a first period associated with the right of use, determining whether the user has access to the first location during a second time period that includes the first time period; The present invention relates to a physical location access control system configured to: In response to determining that the user has access to the first physical location for a second time period that includes A temporary access token corresponding to a first time period is generated and used at a first physical location during the first time period. The requester's access to the site is revoked. a first user at a first physical location during a first time period; allows access.

[0007] One aspect of the present disclosure relates to a physical location access control system, the system comprising: a network interface and at least one processing device, providing a first user with temporary access to a first physical location via a A request from an access controller regarding a first period associated with a temporary access right. and receiving a request from an access controller providing instructions to Providing temporary access to a first physical location to a first user for a first period of time and determining whether the access controller is authorized to access the first physical location. determining that the temporary access right is authorized to be provided to the first user for a first period of time; creating a temporary access record corresponding to the first time period, at least in part in response to the The access controller's access rights to access a first physical location during a first time period. and sending a message corresponding to the temporary access record to a destination associated with the first user. and optionally transmitting access to the first physical location by a first user during a first time period. at least one operable to allow temporary access rights in the absence of a corresponding token; and one processing unit.

[0008] One aspect of the present disclosure relates to a computer-implemented method, the method comprising: In the system, an access right control unit is provided for a first period of time via a network interface. a first access right retrievable by the controller to the first user; have a set of access rights, including a retrievable first access right related to a physical location receiving a request from the access rights controller; a first access right retrievable for a first user at least in part in response to the request of recording instructions regarding providing the access rights in a database; Disable the ability of the user to utilize a retrievable first access right associated with the first physical location. and transmitting a first access from the access right controller via the network. receiving a reclaim request for access rights and determining whether the reclaimable access rights are currently reclaimable; determining whether the reclaimable access rights are currently reclaimable; In response at least in part to the and the access rights controller records the instructions in the first physical location and the first retrievable access rights associated with the first physical location. and enabling the ability to utilize the access rights of the first physical location; revoking the first user's ability to utilize the first available access right. .

[0009] One aspect of the present disclosure relates to a non-transitory computer-readable memory storing instructions, the instructions , when executed by a computer system including one or more computing devices. A computer system is provided with a retrieveable record for a first physical location for a first event. receiving a request from a requester at a first time to provide access rights to a first user; A person grants retrievable access to a first physical location for a first event to a first user. determines whether the requester is authorized to provide the request for the first event to the user Authorized to provide retrievable access to a first user to a first physical location. determining that the first event is a recoverable access Creating an access provision record corresponding to providing the access right to the first user, Revoke the requester's access to access the first physical location for the event; sending a message corresponding to the access provision record to a destination associated with the first user, and optionally The first access token for the first event without a corresponding retrievable access token Performing an action including enabling a first user to access a physical location . [Brief description of the drawings]

[0010] The embodiments will now be described with reference to the drawings summarized below. These drawings and The associated description is provided to illustrate exemplary aspects of the present disclosure. It is not intended to limit the scope of the present invention. [Figure 1A] FIG. 1A illustrates an example of a network environment architecture. [Figure 1B] FIG. 1B illustrates an example of a system architecture. [Diagram 2] FIG. 2 shows an example of the process. [Diagram 3] FIG. 3 shows an example of the process. [Figure 4] FIG. 4 shows an example of the process. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0011] One aspect of the present disclosure is to provide a method for storing, for a specified period of time and / or for a specified event, a physical location, etc. Method and system for providing dynamic and temporary access to any resource Digital access rights lockers can be stored in physical locations, physical objects, and / or other locations. To store data indicating your access rights to rights and the status of those rights It can be used for.

[0012] A given access right may be a subordinate access right to a physical location, physical object, and / or other rights. For example, the top level of access may include one or more physical locations / venues. Multiple related events in a season (e.g. multiple events in a season) Providing users with access to a variety of events (e.g., multiple concerts or multiple sporting events) Lower access rights may be granted to a single event within multiple events at a single physical location. Event (e.g., a season ticket where the transferor or lender A single sporting event for which you have a ticket; and And / or the lower access rights may include one or more events at one or more physical locations. It may also include access rights for a specified period of time (including start and / or stop dates and times). Subordinate access rights may be for part of one event at a physical location. Special restricted areas within a physical location (e.g., restaurants or venues) may be required for a given event. It may also be for access rights to a section (section P).

[0013] A user (sometimes called an access control owner or access controller) has one or more The access rights above (e.g., the highest access rights, the lower access rights, the further lower access rights (e.g., the recipient) to another user (sometimes called the recipient or receiving user). It may be possible.

[0014] Thus, for example, a transfer or loan of access rights may be made with a start time (date and, optionally, The access time may be related to a specific start time of the day (which may be a specific start time of the day) and end time. The transfer or lease of rights shall be based on a start time (which may be a date and, optionally, a specific start time on that date). The Access Certificate Owner may at any time request a or revoke such transfer in accordance with the specified revocation rules. The award may be a starting event (a specific event in a season, such as a sports season) Events) and End Events (which may be specific subsequent events in the season) Optionally, transfer or lease Grants may include multiple access rights to a given event (e.g., granted by multiple attendees of an event). This may include multiple tickets that can be used at the same time. The grant may be temporary in nature or may take the form of a loan of access rights. At its discretion, the access control owner may reclaim any loaned rights at any time. Optionally, the access control owner may reclaim specific or any loaned rights. For example, the access right holder may be able to withdraw the access right once it has been lent. However, the recipient of the access rights can still return the loaned access rights. The access right holder may choose to reject the request (e.g., upon request from the access right holder).

[0015] As mentioned above, certain access rights may be granted to venues (e.g., stadiums, concert halls, Events, such as ticketed events, at physical locations (such as theaters, fields, etc.) (e.g., musical performances, sporting events, movies, plays, art exhibitions, etc.) Additionally, access rights can be assigned to specific seats (e.g., seat sections, rows, and to a specific location within the venue, such as a seat number) and / or a VIP section However, in addition or alternatively, the right of access may be Or it may be for a physical item such as an article of clothing.

[0016] Advantageously, such access rights may optionally be determined by the recipient user device or electronic address (e.g. For example, to an email address, messaging address, or other such address. Without the need to transfer or lend access credentials or keys, or print physical tickets Certain access rights can be transferred or loaned to a recipient user device or electronic access point. The transfer or loan of an access certificate or key to the address is not required. Therefore, there is no opportunity for the access rights to be intercepted or misused. Greatly improves security.

[0017] Instead, the transfer or loan may be made at will, subject to the data maintained by the access control system. The access rights are recorded in a digital access rights locker, which may be in the form of a base record. Optionally, the access control system may include a synchronous distributed database for storing said records. The database records the access rights of the access holder (e.g., (the first user to purchase or own the Access Rights), and the transfer or loan of the Access Rights from the Access Rights Owner For example, a given access right may include an identifier associated with any recipient of the access right. The right holder has the right to use the specified access rights or the right holder has the right to use the specified access rights. The access rights may be associated with a logical toggle that indicates whether the access rights are being transferred or loaned to the recipient. If a given access right is assigned or loaned, the corresponding recipient identifier is toggled In this way, the recipient of the access rights can access the physical or electronic ticket without Even if you do not have an access token such as a At the same time, the access right holder can activate the ability to gain admission to the access point. This can revoke the ability of a user to use their privileges.

[0018] As discussed above and elsewhere herein, optionally, access rights may be granted. The owner can retrieve certain access rights that he / she has lent to other users. If the access right holder does not recover the appropriate loaned or transferred access right, The owner of the access rights may be restricted from using the access rights that he or she has loaned or transferred. For example, The access holder must provide a certificate to access the event to which the corresponding access has been lent. When a user presents a certificate or biometric authentication, the disclosed system The system can then use the access rights holder record to The system determines whether access has been granted based on the rights holder's records and notifies the event venue (e.g. For example, a display and / or sound device) that the access right holder refuses entry to Optionally, the access right holder may transmit an instruction to the user to display an indication that the access right has been loaned. If you withdraw your access rights, the recipient of the loaned access rights may have already used the access rights to access the venue. A determination can be made as to whether the recipient of the loaned access has already If it is determined that you are using your access rights to access the venue, Users may be restricted from retrieving access rights and may be restricted from entering the event venue.

[0019] For example, if the recipient of the loaned access is still using the access to the event venue, If it is determined that the access rights are not available, the access rights holder will be allowed to revoke the access rights and The recipient of the loaned access may be granted access to the event venue. If it is determined that the access rights have been used, the access rights holder will be prevented from revoking the access rights and the event Entry to a venue may be restricted. As a further example, the granted access rights may not allow access. If the period prior to the event is determined to be greater than a predetermined threshold period, The person who granted the access right may be allowed to reclaim the access right that he / she granted. If the period prior to the event is determined to be less than a predetermined threshold period, the access right owner In this case, the withdrawal of the loaned access rights may be restricted, and entry to the event venue may be restricted.

[0020] The revocation of access rights may be recorded via a toggle in the corresponding database record. For recipients of granted (and now revoked) access, the access has been revoked. A notification may be sent indicating that the recipient is no longer available. An associated electronic address (e.g., email address, messaging service address) and / or in an application configured to provide access to In addition, the recipient may use the loaned access rights to enter the event venue. For example, the system may restrict the access rights from being recorded in the access rights holder record. The system may then display a message on the event venue indicating that the recipient has collected the item. Instructions may be sent to display a sign indicating that entry is denied.

[0021] To illustrate, attendees and / or devices associated with attendees may be identified by physical location. For example, biometric authentication (e.g., fingerprints, face print data, iris prints, etc.), light displayed on a user device, Academic seal (e.g., optical code such as QR code or other bar code, etc.), an audible indicia generated by a speaker on the attendee device, a radio frequency signal from the attendee device; and / or other means to identify attendees. Wearable computing devices (e.g., smart watches, smart back smart glasses, smart clothing, smart jewelry, etc.), tablet computers , or other portable computing device or token.

[0022] Once an attendee is identified, any correspondence owned by the attendee or transferred or loaned to the attendee will be The system searches for access rights, including those that you own, transfer, or loan. If any, the attendees will be able to reach the physical location at the current time (e.g., the current event). The right to access the information may be determined by the owner, owner’s authority, or the authority to transfer the information to another person. The loaned access rights (if any) allow the attendee to view the current time (e.g., the current event In response to determining that the public interest (including the event) is entitled to gain access to the physical location, A signal may be generated that allows the seat holder to access the physical location.

[0023] As described elsewhere herein, the signals may include visual light indicators, audible tones, and and / or provide a human-perceivable "access granted" indication in the form of haptic feedback Additionally or alternatively, the signal may be used to provide attendees with access to a physical location. The barriers providing access to the device can be unlocked and / or opened.

[0024] Optionally, multi-factor authentication consisting of multiple certificates and geographic location verification may be used by a given attendee to Multi-factor authentication can be used to verify that a user has gained access to a particular physical location. ,Access to resources (e.g., entry to a site such as an event venue) can be of different types It provides additional security by requiring two or more certificates. As explained, it is optional. The certificate may include a unique user identifier and a unique user device identifier, to a particular geographic location (e.g., a venue or a particular set of venue entrances, e.g., seating areas) You may need to present it at the entrance.

[0025] A User may acquire, transfer or lend access rights to an event for one or more attendees, Optionally, you may have physical copies of the software installed on your computer in the same manner as above. A ticket or a downloaded ticket or access token stored on a user device Instead of providing users with a website, The user's rights may be enforced using multi-factor authentication, which advantageously allows the user to The device does not need to be connected to a network. For example, it can be installed at (or part of) the event venue. Optionally, you can restrict a user's right of access to a specific location (e.g., event venue or venue / seat). This is accomplished by authenticating user equipment and users at the user area (a subset of the seating area entrances). This can be done.

[0026] For example, an application may be configured to allow users to access events at a venue. You may download the app from an application store (sometimes called an app store) or other source. The user may then download and install the application on the user's device. For example, an application can manage fungible electronic tokens. Tokens (also referred to herein as Non-Unique Digital Elements (NDEs)) and Non-Fungible The device is configured to store a unique token (sometimes referred to herein as a unique digital element UDE). This may also include access to the wallet (sometimes called the logical storage module) configured in the Users are provided with an access control system configured to manage and control event access. A user may register an account on the system. A user account is a unique The authentication credentials may include an identification of the user and / or a unique identifier associated with the user device. The unique identifier associated with the user device may optionally be an identifier other than a telephone number associated with the user device. It may be a unique identifier, or in addition, to make it more difficult to imitate. A unique user device identifier, optionally used to perform multi-factor authentication, is provided by the access control system. In some cases, the UE may or may not assign a QoS limit to the user device.

[0027] For example, the User Equipment Identifier is the International Mobile Equipment Identity (IMEI) 14-digit number, letters and Unique Device ID (UDID), a 40-digit sequence of numbers, serial number, and advertiser One or more of the following: ID for Google Advertiser (IDFA), Google Advertiser ID (GAID), Optionally, the access control system may include a method for detecting a downloaded application on the user device. Embed a unique identifier into the application, which is then used as a unique device identifier. possible.

[0028] A unique user identifier (optionally used for multi-factor authentication) is provided by the access control system. For example, a user may or may not be assigned a user ID. The user can provide a user ID and the system can search the database for the user identifier. The system may determine that a user identifier is associated with another user or user account. If detected, the user will be prompted by the system to select a different user identifier. This process may be repeated until the user has specified what is determined to be a unique user identifier. Optionally, in addition or instead, the system may generate a unique user identifier. The user may then create a unique user identifier and transmit the unique user identifier to the user device. The provided application utilizes the unique device identifier and performs the authentication / verification described herein. It can be used during the authentication process. Optionally, The option provides for a unique user device identifier and / or user identifier in a human readable form (alphanumeric or The user may or may not be presented with a text (using ASCII characters). Thus, the user may be unaware of the actual value of the user device identifier and / or the user identifier. There is a match.

[0029] The user enters the venue (which may be the first entrance to the venue building or area, or may be a VIP to reach a specific seat within a venue, such as an area, or an internal entrance to another area Upon receiving the signal, the user device may optionally encode (e.g., encrypt) the signal from the digital domain to an optical, wireless, a unique user device identifier and / or user The user device may present the identifier to the venue scanner. A unique user device identifier and / or user identifier (through the application provided) and the current time stamp, via a visual indicia (e.g., a QR code or The information is encoded into a barcode (e.g., a linear barcode) and transmitted as an electronic signal (e.g., Bluetooth th, Wifi, NFC, etc.) and / or via audio signals. The timestamp may be used to identify the screen of the data submitted by the user. Take a shot or other recording and transfer the screenshot or other recording to another user device Other users attempt to gain access to the event using screenshots or other recordings. This can prevent people from viewing your content because screenshots or other recordings can be This is because the timestamp can no longer reflect the current time.

[0030] The user device application may periodically (e.g., every 5, 10, 15, or 30 seconds) (e.g., update the presentation data and update the timestamp to approximately the current time. The user device identifier and / or user identifier, (and optionally a timestamp), are hashed By using code, by using symmetric encryption, by using asymmetric encryption, or by any other method It can be encrypted.

[0031] For example, a symmetric encryption algorithm encrypts a fixed block of data (128 bits) at a time. The algorithm is AES (Advanced Encryption Standard ) can be used. AES uses a substitution network and has a fixed block size (e.g. For example, 128 bits) and a key size of 128, 192, or 256 bits.

[0032] As a further example, RSA (Rivest-Shamir-Adleman) encryption / RSA is a public key cryptosystem, where the encryption key is public and the decryption key is The encryption key is kept secret. RSA users receive the public key (based on a large prime number and a complementary value). The data is then encrypted using a public key (primes are kept private / secret). Anyone can encrypt it, but only someone who knows the secret key (a prime number) can decrypt it. , Triple DES (Data Encryption Standard) encryption / decryption Triple DES is a block encryption technique that can be used with any encryption method (optionally in conjunction with AES). The block encryption algorithm is applied to each data block three times. Each block is a 64-bit data block. The three keys are used as a bundle key of 56 bits per key. In some forms of ES, all the keys were independent, or two of the three keys were independent. Or all three keys are the same (Triple DES). The key length for Triple DES is 168 bits, and the security of the key can be 112 bits. As an example, a hash function may be used. A hash is generated by applying a hash function , converts the plaintext or key to a hashed value. Optionally, the input length is set to be greater than the output hash value. Hashes are small in size and cannot be reverse engineered to recover the original plaintext or It provides a one-way encryption process so that the key cannot be derived.

[0033] Therefore, venue scanners can be cameras, laser scanners, radio frequency receivers, palm scanners, etc. Scanner, microphone device, and / or unique user device identifier and / or user identifier The device may include other devices for receiving the signal.

[0034] The timestamp may also be calculated using a unique user device identifier and / or a user identifier and a time stamp. When the stamp is received by the venue scanner and / or access control system, may be generated by venue scanners and / or access control systems (or other systems) Venue scanners are encrypted, either directly or through an access control system (or other system). and decoding the encrypted unique user device user identifier and / or timestamp to identify the user. Timestamps received from devices generated by venue scanners and / or systems The timestamps match (e.g., exactly match, or match within a certain range, such as 1-15 seconds). If the authentication fails within a certain time range, the venue scanner or system may indicate a failed authentication. do.

[0035] If the timestamps are determined to match, the venue scanner will then Transmitting a unique user device and / or user identifier (or a hash thereof) via the system; A unique user device and / or user identifier ( If the password (or its hash) matches that of a user account, the user account is A determination may be made as to whether a particular access right is relevant to one or more access rights to the object. If a hash is used, the hash may be, for example, MD5, SHA-1, or SHA-256. The user device uses a public key associated with the system to authenticate the user. If the user device and / or user identifier are encrypted (if asymmetric encryption is used), The private key may be used to decrypt the user device and / or the user identifier. If the user identifier is encrypted using symmetric encryption, the The key may be used to perform the decryption.

[0036] The transferred or loaned access rights may be encoded in a token. Data identifying the access rights controller granting the access rights, the identity of the person who granted or loaned the access rights Events, locations, associated start times, associated end times, and / or associated Data identifying the access rights (e.g., the period of access rights to the data subject), the status of the access rights (e.g., transfer, loan, return, etc.), The access rights data may include data indicative of the recipient's access rights (e.g., the number of recipients ... etc.) and / or data indicative of the recipient user. The data can be encrypted using a public key, such as the keys discussed elsewhere in this specification. , can be decrypted using the private key.

[0037] As described elsewhere herein, by way of example, transferred or loaned access rights can be used to search for a specific event, all events within a specified period, or events beginning at a specified start time. All events, or the first event and the specified For the subsequent event and all events between the first event and the subsequent event Thus, the user and / or the user device may be located in a physical location. Once identified, the user and / or user device is currently Does the event correspond to access rights that have been specifically granted or loaned to the current event? or the access rights are within the period of the transfer or loan to the user, or This applies to the period after the access right was transferred or loaned to the user and before the access right was reclaimed. or the first specific event or any subsequent specific event or the first specific event A determination can then be made as to whether the event falls within a specific event. do.

[0038] A user account may have one or more access rights to an event (e.g., as discussed herein). If it is determined that the information is related to access rights (such as access rights transferred or loaned by other users) In this case, the event will be handled through devices at the venue entrance (e.g., display devices, sound devices, opening gates, etc.). For example, authentication / verification displays may be provided to allow users to access the event venue. Successful authentication may be indicated by a light of a particular color (e.g., green) or by a text message (e.g., "Authentication approved"). "You have been selected"), a graphic (e.g., a thumbs up symbol), and / or a sound (e.g., a bell Optionally, the number of access rights a user has may be displayed on a display at the venue. For example, a user may present access rights for the user and for certain friends of the user. Optionally, depending on the success of the authentication / verification, the solenoid, stepper motor, A switch, or other electrical or electromechanical device, is activated to unlock / open the barrier and allow the user ( and one or more other users) into the venue.

[0039] A User Account has one or more access rights to an Event (e.g. purchased rights, transfers, or loaned access rights), if it is determined that the (e.g., a visual indicator, a sound emitting device, a gate that is closed or remains closed, etc.) For example, authentication / validation failure indications may be provided for specific A colored (e.g., red) light, text (e.g., "Authentication failed"), or graphics The text may include a check mark (e.g., a prohibition sign), and / or a sound (e.g., a boing sound).

[0040] Optionally, authenticating the user as having access to the event or a given venue entrance For a determination to be made that a venue is verified, an identifier associated with the event venue scanner must be provided. It must be received and verified (eg in conjunction with a user identifier and a user device identifier). For example, the access rights of a user stored by the system may be determined based on which venue entrance the user passed through. (and indicate which venue entrances the user is not entitled to pass through) Thus, the user identifier, the user device identifier, and Even if the password and timestamp are verified, the user device may not be able to access the scanned venue entrance. If the User does not have access rights, a corresponding notice may be sent to the Venue Operator and / or the User at their discretion. and the user may be denied entry. Optionally, the notice may be provided to This can optionally show the entrance to a venue that the user has permission to access. The user is provided with access to a specific seating area at the event venue that the user has access to. Ensure that access to entrances that provide entry to seating areas to which you are not authorized is not permitted. I testify.

[0041] Optionally, one or more of the above authentication techniques (e.g., user-assigned or user-authorized) The unique user identifier, unique device identifier, and / or venue authentication scanner identifier provided by the In addition to or instead of a personal identification number (such as a personal identification number), biometric authentication may be provided. The camera may be utilized to capture an image of the user device that may be used to authenticate the user. As a further example, a fingerprint reader may be used to read a user's fingerprint for authentication purposes. As yet another example, an iris reader may be used to capture a user's iris for authentication. As yet another example, infrared or near infrared light may be emitted to detect the vein pattern of a user. A palm scanner configured to obtain a biometric reading of the user may be utilized. The read value can be associated with the stored user reading (with the corresponding user identifier and device identifier). If they do not match, a verification failure indication is provided, as described above. possible.

[0042] Thus, a user can be authenticated using any multi-factor authentication, and the user device If the user device does not have a downloaded ticket or the like and the user device is not Even if the venue does not have Internet access, the event can be accessed through the user device. The right of a user to access the site can be determined at the venue. Multi-factor authentication can be used, for example, The user’s unique user identifier, unique user identifier, timestamp, and biometric read The identifier may include two or more of a unique user identifier, a unique address, a unique number, or a geographic location. The user identifier, biometric reading, and / or timestamp are stored in a specific location, i.e. (If you need to check at the event venue).

[0043] Optionally, the transfer or loan of access rights from one user to another may be made using tamper-resistant or Optionally, the database may be made publicly available. Optionally, the transfer or loan of access rights may be recorded and made accessible to the public. Distributed database that is synchronized and available across different sites and geographies depending on the number of attendees The records may be stored on a distributed digital ledger such as a blockchain. , the user identifier and the current state of the access rights (e.g., whether it was loaned and for how long). The information may include, for example, whether the information was provided or not.

[0044] Optionally, the transfer or lending of access rights may be carried out on a distributed digital ledger (e.g., a synchronous distributed ledger). on a synchronous distributed database) in the form of computer code executable on the synchronous distributed database It can be stored in the form of a smart contract. Transactions can be processed by a synchronous distributed database, making it smart. This can only occur if the conditions specified in the contract are met. For example, a smart contract is an "if / when...then..." strategy written into code on the blockchain. A network of computer systems may include a statement that, under certain conditions, When the conditions are met and verified, an action can be executed. Transaction records are encrypted, making it extremely difficult for hackers to use such records. It can be made difficult.

[0045] For example, a synchronous distributed database can identify the access rights administrator who is granting the access rights. data identifying the event, the location, relevant start time, related data identifying the access rights (access rights for the relevant end time and / or relevant period); Data indicating the status of the access right (e.g., transfer, loan, withdrawal, etc.) and / or the recipient user A block or a reference to a block containing some or all of the data shown may be stored. The access rights data is stored using a public key, such as the keys discussed elsewhere in this specification. It can be encrypted using a private key and decrypted using a private key.

[0046] For example, the access rights held by the access rights holder (e.g., event tickets, VIP rights to space, food or goods, etc.) and their current status (e.g., rented are in a loan, are withdrawn from loan, are transferred, or are in default (e.g., loan, withdrawal A user interface that lists all the users who have transferred their accounts (e.g., A web page presented via a dedicated application such as a chat app or via a browser. The access control owner can then present the request to the access control owner via a predefined page. Depending on which access rights you select, various attributes related to the selected access rights are presented. (e.g. available loan period, sub-rights available for loan, etc.) The user interface allows the access owner to specify the parameters related to the access loan (e.g. For example, a start time, an end time, other parameters discussed herein, and / or the like. ) to allow the access owner to specify the access rights according to the parameters specified by the access owner. You can provide a field where you can specify to whom you want to grant access. For example, The recipient of the access right to the service is identified by an electronic address (e.g., an email address) associated with the recipient. You may specify this information via your email address, message service address, or other electronic address. do.

[0047] Optionally, which access rights may be granted, when certain access rights may be granted, How long can access rights be loaned, and how many access rights can be loaned at a given time? How many access rights can be granted in a given period (e.g., month, year, etc.) whether a given access right may be loaned, how often a given access right may be loaned, for a given period of time Access right lending rules that control how many access right loans can be reclaimed during a period The access rights and correspondence that the access rights holder grants can be implemented in the system. The user interface allows you to select the loan parameters to be applied to which access rights are currently being loaned. which access rights can be loaned, which access rights cannot currently be loaned, and which loan parameters are available for a given access right. parameters and / or which loan parameters can be selected for a given access right. This can be pre-configured by the system to indicate whether the loan is currently allowed or not. For unauthorised access rights, the system uses the access rights holder's loan history to and / or based on the access rights lending rules, the access rights owner lends the access rights. The system can determine when access rights are granted. the dates and / or other conditions that must be met before a User can loan access rights; The display of the information can be preset in the user interface.

[0048] Optionally, provide the Access Holder with a memorandum or other benefit for the loaned Access. Fungible and / or non-fungible tokens may be provided by the system. For example, a token can be a picture of a ticket for an event to which the loaned access rights apply, Images, graphics, cryptocurrencies or other information of performers at the event to which the access rights have granted access Optionally, the granting of the token may be contingent on the fulfillment of one or more conditions. For example, tokens may be granted virtually immediately upon granting of access rights. As a further example, a token may be used to allow a recipient of access rights to use the access rights. In addition, access rights may be granted depending on whether the access rights holder can reclaim them or not. In some cases, tokens may be awarded in response to a determination that the transaction cannot be completed.

[0049] Certain embodiments will now be described with reference to the figures.

[0050] FIG. 1A illustrates an example network that may be utilized to implement the example processes herein. The access control system 102 is connected to the network 100 (e.g., Internet, Intranet, Cellular Network, and / or other networks) via one or more respective venues (or components located at the venues) The wireless LAN may be in communication with one or more venue systems 104, 106, 108.

[0051] For example, a given venue system may be a venue entrance (an entrance to a venue building, a corresponding authentication scanner located at the entrance to the building (which may be a building entrance to a restricted area) A given authentication scanner may, by way of example, identify a user and / or a password for authentication purposes. Take an image of the barcode (e.g., 1D or 2D barcode such as a QR code) a camera configured to capture a signal; a barcode scanner (e.g., a laser barcode scanner configured to receive and store authentication data from the user device; A radio frequency receiver configured to receive a radio transmission; a user device (e.g., 110, 112, 114)。 110, 112, 114) configured to receive an audible signal including authentication data. Microphones, biometric readers (e.g. fingerprint readers, iris readers, palm readers) , etc.), and / or a unique user device and / or other device for receiving a user identifier. A given venue system may include one or more of the following: A network configured to communicate with the authentication system 102 and, optionally, other systems. The system may include a network interface.

[0052] The access control system 102 may generate two-dimensional and / or three-dimensional venue seating charts and event information. For example, the event information may be stored in a For events, the event date, event name (e.g., performer names, tour name, Sports event team name), event venue, event venue seating / section access Token price, which seat access tokens have been sold and which are available The access control system 102 may store user account information. and may contain some or all of the following: username, user email address, User phone number / SMS / text messaging address, user avatar (user UDE-related content that users can select from; geographic information (e.g., address, postal code, city, etc.), unique user identifier (e.g. alphanumeric identifier, fingerprint data, data, facial print data, iris print data, etc.), unique user device identifier, user access rights ( The event identifier corresponding to the event for which the user has the right to access the event (including the right to access the event with the lower right), The right (optionally, the loan date, the identification of the event for which the right grants access, the right loan date, (including identification of the event venue, identification of the event date, and identification of the recipient), Access rights (optionally, the loan date, identification of the event for which the access right allows access, (including the identification of the event venue, the date of the event, and the identity of the licensee) The retrieved loaned access rights (optionally the retrieved loan date, the date the retrieved access rights were retrieved, Identification of the event for which access is being granted, identification of the event venue for which access is being granted, and identification of the event date user preferences (e.g., favorite performers, favorite venues, favorite Music style, etc.), UDEs given to users (UDEs are stored in a synchronous distributed database) a UDE that you have reassigned to another person; the fees paid to you, your unique UDE / cryptocurrency e-wallet identifier, and / or this Other user-related data that is disclosed to the

[0053] The access control system 102 may also perform venue authentication, as described elsewhere herein. You can configure the scanner to authenticate users using authentication data scanned by the scanner. For example, the access control system 102 may be configured to: Authentication may be used.

[0054] The access control system 102 determines which access rights may be granted and sets predetermined access rights. When can a given access right be granted, for how long can a given access right be granted, and how much access can be granted at a given time? How many access rights can be granted, for a given period of time (e.g., months, years, etc.) How many access rights may be granted to a user, and how frequently a given access right may be exercised. How many access rights can be loaned and how many can be reclaimed in a given period It can also be configured to implement access loan rules that control access control. The control system 102 may be configured to preconfigure the user interface described herein. It can also be configured.

[0055] The access control system 102 may also be configured as follows: UDE Allocation Rules; User's Right to Sell, Exchange, or Otherwise Transfer UDE rules governing the conversion of non-unique digital elements into unique digital elements; For example, an access control system can be configured to enforce rules that control 102 is configured to implement the rules and allocation processes described elsewhere herein. It is possible.

[0056] The access control system 102 may include a distributed ledger 116 (e.g., a blockchain or other It can be configured to record UDEs on a synchronous distributed database. The distributed database 116 may be a public or private synchronous distributed database. The UDE provides access rights, images (e.g., photos, videos, graphics, digital art, It may represent a UDE, a network, a sound file, and / or text. Any rights you have provided to the user in relation to the content represented by the a license to use, copy, and display the Content Assets, can be used to establish verified, public proof of ownership of a property (e.g., the right to exchange). Cut.

[0057] FIG. 1B is a block diagram illustrating example components of the access control system 102. The exemplary access control system 102 may be used to implement aspects of the present disclosure. The present invention includes an arrangement of computer hardware and software components that can be used to implement the present invention. The illustrative components may include more (or fewer) components than those depicted in FIG. 1B. It will be understood that the access control system 102 may be a cloud-based The device may include a computer system.

[0058] Regarding cloud-based computer systems, The systems are located in different facilities, remotely accessible, and can be delivered quickly when needed. Hosted computing is a collection of physical computing resources that can be used to This may include a cloud computing environment (sometimes referred to as a "cloud" computing environment). Certain data set forth in the subsection shall be made available on an optional basis, remotely accessible and promptly available if necessary. a hosted storage environment that includes a collection of physical data storage devices that can be provided It can be stored using a data store that can be used to store data (sometimes called "cloud" storage). ).

[0059] The access control system 102 includes one or more processing units 120B (e.g., a general purpose processor and / or high-speed graphics processor) and one or more network interfaces interface 122B, a non-transitory computer readable medium drive 124B, and an input / output device and a device interface 126B, all of which communicate with each other via one or more communication buses. The network interface 122B can communicate with one or more networks or Computing systems (e.g., venue systems, user devices, distributed ledgers, event The services described herein have connectivity to systems such as event promoters, seating chart visualization systems, etc. Thus, the processing unit 120B can provide a service to other Receiving information (e.g., an access token) from a computing device, system, or service Receive and respond to requests and instructions (e.g., purchases, verification / authentication data, verification / authentication requests, etc.) The processing unit 120B can provide data and / or execute instructions. 4B and further outputs information via input / output device interface 126B. The input / output device interface 126B may provide a keyboard, mouse, digital It receives input from one or more input devices such as a pen, touch screen, microphone, or camera. It can be included.

[0060] The memory 128B may be configured to allow the processing unit 120B to implement one or more aspects of the present disclosure. The memory 128B may include a RAM or other memory device. , ROM (and variations thereof such as EEPROM) and / or other permanent or non-transitory computer The memory 128B includes an authentication and electronic asset management module 134. In general management and operation of processing unit 120B and its included components. Operating system that provides computer program instructions for use by 2B can be stored.

[0061] The memory 128B stores the user name, the user email address, the user phone number / SMS / Text messaging addresses, other electronic destinations, geographic information (e.g., physical addresses) , postal code, city, etc.), unique user identifier (e.g. alphanumeric identifier, fingerprint data, face fingerprint data, iris print data, etc.), a unique user device identifier, A hash of an event identifier, user device and / or user identifier corresponding to the event ,User preferences (e.g., favorite performers, favorite venues, favorite music styles, etc.) payment device data, and / or other user data as described herein. The device may store user accounts including, for example,

[0062] The memory 128B stores events, access tokens, and other information, as discussed elsewhere herein. Memory 128B may also store user granted access rights, user application, and venue information. Information (optionally, the loan date, identification of the event for which the access right allows access, the access right loan (including identification of the event venue, identification of the event date, and recipient information), The access rights granted (optionally the loan date, identification of the event for which the access rights grant access, (including identification of the event venue, event date, and authorizer) Recovered loaned access rights (optionally, the date of recovery, the date the access rights were recovered, Identification of the event for which access is being granted, identification of the event venue for which access is being granted, and the date of the event The identity of the message, including the identity of the recipient, may be stored in the user record and / or elsewhere.

[0063] Some or all of the data and content discussed herein may optionally be relational Database, SQL database, NOSQL database, or other database type Content elements can be stored in types that are difficult to handle in traditional databases. BLOB (binary) files such as large images (e.g. still images, videos, multi-layer graphics) It may contain a large object, so it may contain a part of a content element (e.g., a BLOB ) or you can store everything in a file and store the corresponding reference in a database. Optionally, the memory 128B may include one or more third-party cloud-based storage systems. It may include

[0064] The authentication and electronic asset management module 134B provides a graphical user interface. A GUI component that generates and / or pre-configures the GUI and processes user input, and a search component ( (which may include a search engine used to search for ticketed events) The authentication and electronic asset management module 134B is also configured to authenticate users. As described above, authentication may include a multi-factor authentication component such as a unique user identifier and A hash of the unique device identifier generated by the event access system 102 As a further example, authentication may be performed by comparing a unique user The data, including the user identifier and a unique device identifier (e.g., a private key or a key used to perform encryption) and decrypts the data using the key used to access the event access system 10. 2. Optionally, you can encrypt a fixed block (128 bits) of data at a time, similar to what was explained in AES (Advanced Encryption Standard), a symmetric encryption algorithm that encrypts For further example, RSA (R Ivest-Shamir-Adleman encryption / decryption technology. As yet another example, optional triple Data Encryption Standards As another example, A hash function may be used. Optionally, in addition or instead, biometric measurements of the user may be used. The authentication may be performed using

[0065] The access rights verification component verifies that an authenticated user has access to the venue (and / or part of the event venue). ) whether you have the relevant rights to access the event and the access rights rules the rule engine (e.g., which access rights may be granted, when a given access right may be granted, how much access can be obtained, for how long a given access right can be loaned, and how much How many access rights may be granted and for how long in a given period (e.g., month to month, year to year, etc.) How many access rights may be loaned and how frequently a given access right may be loaned how many access loans can be redeemed in a given period, and / or similar and (configured to determine).

[0066] The ticketing module 136B allows users to view information about events for which they have been ticketed. and use the Event Venue seating chart and view available and unavailable Event Venue seats. view the view from a given seat, view the price of access tokens, viewing the user account (optionally, some of the user account information discussed herein); Creating, purchasing or otherwise accessing one or more Events The user obtains the access rights (e.g., access token) that he or she has obtained (e.g., Stores an indication of the access rights (purchased by the user, transferred to the user, or loaned to the user) store a representation of the access rights that the user has transferred to other people, and / or Recommending events (e.g., user preferences, access token acquisition history, geographic location It can be configured to allow for the use of .

[0067] The image analysis and processing module 138B may also process (e.g., decode) the encrypted authentication data. Image analysis (for optical indicia) to enhance contrast, deblur, and / or improve image quality. Image rotation is performed to obtain an optical indicia (e.g., a bar image captured using a camera device). The invention can be configured to enhance the decoding and decryption of images of the

[0068] The memory 128B may include an interface module 130B. The sensor module 130B is adapted for enabling compatible computing devices to perform authentication and electronic asset management. Send data and content to module 134B and ticketing module 136B; or The present invention can be easily configured to generate one or more interfaces that can be received from the can.

[0069] Referring now to FIG. 2, an example of an authentication / verification process is shown. This process is described elsewhere in this specification. Access control systems, venue systems, and / or other systems, such as those described in In the following example, the user device and the user equipment Although this paper discusses encryption of the authentication data presented to Optionally, the user device may transmit the encrypted ) authentication data, the scanner reads the authentication data and encrypts the authentication (e.g. using key encryption or hashing), and optionally by other systems described herein. Encryption may be performed.

[0070] In block 202, a venue authentication scanner is used to access the encrypted authentication data. As described above, the user device scans the encrypted optical via encrypted radio frequency signals and / or encrypted voice Via the signal, a unique user identifier and / or a unique device identifier may be presented. For example, the scanner may include a camera, a laser scanner, a radio frequency receiver, or a microphone. It can be seen.

[0071] The scanned authentication data can be compressed. For example, an image of the authentication data can be taken and If you use a camera to get the best results, compress the image to reduce the file image size and The memory required to store the image and the network required to transmit the image are required. Compression can be lossless or lossy. As an example, when using lossy compression, a transform code may be used to perform the compression. A lossless compression scheme (e.g., discrete cosine transform (DCT)) may be used. The image may be encoded using a continuous length coding, entropy coding, or predictive coding. The file can be decompressed using a decompression module that corresponds to the encryption format.

[0072] Optionally, a timestamp generated by an application provided on the user device. The time stamp may or may not be encrypted. Keys embedded in applications (e.g., access control systems or other systems that perform decryption) This can be done using the public key of the system. Optionally, authentication data (e.g. A hash may be applied to the unique user ID and / or unique device ID. Additionally or alternatively, a biometric scanner may be used to capture a biometric feature of the user (e.g., a face print, Fingerprints, iris images, etc.) may also be read.

[0073] In block 204, the encrypted authentication data is decrypted (e.g., Optionally, the received authentication data is hashed using a decryption key, such as a private key associated with the If the authentication data is encrypted, the system does not perform any decryption operations. Optionally, encrypted authentication data can be generated using the venue authentication The certificate may be transmitted from the scanner to a remote system that performs the decoding.

[0074] Optionally, image analysis and processing is performed on the image of the optical indicium to enhance its readability; Thus, increasing the accuracy in decoding and decryption. The QR code (registered trademark or other barcode) is black and against a dark background on the user device. or on the image, in response to detecting insufficient contrast (e.g. , by not detecting clear edges), contrast enhancement may be performed. For example, Edge boundaries in an image of an optical display, such as the edge between a bar code and a background of contrasting color Identifying boundaries and enhancing image contrast in areas immediately adjacent to detected edges A filter may be utilized.

[0075] Also, if the optical code is unclear, it is difficult to accurately decode and decode the optical code. Therefore, a deblurring process and / or a noise reduction process may be performed. The deblurring process may include applying a convolution filter to the image of the optical code. The image processing and denoising can be performed using deep learning convolutional neural networks. A convolutional neural network can be constructed by optionally configuring a neural network input layer, One or more neural network hidden layers, a neural network pooling layer, and The neural network output layer may include a convolutional neural network. Other learning engines may be used. Neural networks also perform image classification, recognition, localization, and / or object detection. It can be used to optionally convert low-resolution images to high-resolution images. To do this, we can use an autoencoder.

[0076] Optionally, the optical indicia image may be used to further facilitate decoding and decrypting the encoded authentication data. To accommodate this, the image can be rotated to match the desired orientation.

[0077] At block 206, a venue entrance identifier is received. The venue entrance identifier is used to authenticate the user. This can be done by using a scanner or a venue system to access the venue entrance. The venue identifier may be an alphanumeric code and may be a descriptive message. The location may include metadata (e.g., East Entrance 1 of the venue).

[0078] In block 208, the timestamp received from the user device is converted to a system generated timestamp. Determine whether the timestamps match (e.g., exactly the same). If it is determined that the A failure signal may be generated. This signal may be a light of a particular color (e.g., red), a display It can present text (e.g., "Authentication failed") to the ray, graphics (e.g., The method may involve the display of a warning sign (e.g., a prohibition symbol) and / or the emission of a sound (e.g., a booming sound) by a speaker. It can be used to wake up the

[0079] If it is determined that the timestamps match, processing may proceed to block 210. The device ID value received from the user device is matched to a unique device ID in the user account record (e.g. For example, IMEI, UDID, serial number, IDFA, and / or GAID If it is determined that the received device ID does not match, authentication / verification A failure signal may be generated. This signal may be a light of a particular color (e.g., red), a display It can present text (e.g., "Authentication failed") to the ray, graphics (e.g., The method may involve the display of a warning sign (e.g., a prohibition symbol) and / or the emission of a sound (e.g., a booming sound) by a speaker. It can be used to wake up the

[0080] If it is determined that the device IDs match, processing proceeds to block 212. If the user ID matches the received value, the user account that stores the matching unique device ID is A determination is made as to whether the received user ID matches a unique user ID in the record. If a match is determined not to occur, an authentication / verification failure signal may be generated, similar to that described above.

[0081] If it is determined that the user IDs match, processing continues to block 214. will use the user ID and / or device ID to view the events the user is currently viewing at the venue. Determine whether a user has access to a service through their user account records. For example, if a User has purchased access rights, access rights have been transferred to the User, or access rights have been transferred to the User, In the example of a user being granted access rights, It can be determined whether the granted access rights apply to the current event. Example For example, a user might record a series of events (such as a sports team's season or a musician's You are granted access to a specific event series, and the loan is valid for the specified start and stop dates. If so, checks whether the current event belongs to the set of events to which access rights have been granted. Whether the current date is included in the start and end times of the access rights loan, In this example, a determination can be made as to whether a loan has been collected. The account belongs to a set of events for which access rights have been granted, and the start and end dates If the access rights loan is not collected, the event venue will Determines that the user has access to the current event. If not, It may be possible to determine that a user does not have access to an event at an event venue on a given date. can.

[0082] If you determine that you have access to the event at the venue on the current day, optionally In block 216, the venue authentication scanner ID is used to identify the venue to which the user has access. It can be determined whether the venue entrance corresponds to a specific venue (e.g., a user account A list of seats assigned to users from the portal and the corresponding entrances to access the assigned seats. The venue authentication scanner ID validates the user's access rights. If it is determined that the venue entrance does not correspond to the venue entrance having the same authentication / verification failure signal as described above, Optionally, it may generate text indicating the entrances to the venues to which the user has access. The user may then proceed to such authorized entrance and be The scanning of the authentication process can be repeated.

[0083] It is determined that the venue authentication scanner ID corresponds to a venue entrance that the user has the right to access. If so, an entry signal may be generated in block 218. The entry signal may include: A light of a certain color (e.g., green), text (e.g., "Authentication Approved"), The user may then trigger a visual (e.g., a thumbs up symbol) and / or a sound (e.g., a bell). Optionally, the entry signal may indicate the number of access rights the user has. The entrance barrier may be unlocked or opened to allow the user access to the entrance. For example, the signals may control solenoids, stepper motors, and / or pneumatic actuators. Activation can be used to unlock and / or open entrance doors, extend barriers, lock turnstiles, etc. In addition, the entry signal may be a signal that allows for the release of a lock and / or rotation. It can be used to determine whether to assign a child element to a user. If the access rights are loaned to you by another user, the loaned access rights are not used. An indication that the item is no longer available for collection may be stored in the database.

[0084] Optionally, instead of comparing the user ID and device ID, the user ID received from the user device is compared. A hash of the user ID and / or device ID (e.g., radio frequency signal, optical indicia, audio signal, number) and compare it with a hash of the user ID and / or device ID from the user account If there is a match and the timestamps match, If so, processing may proceed to block 212. If not, authentication / verification may be performed in the same manner as described above. A failure signal may be generated.

[0085] Now referring to FIG. 3, an exemplary process for lending access rights is shown. The process may be performed by the access control system 102, the user device, and / or other devices disclosed herein. The present invention may be implemented in whole or in part using the devices or systems described in the following paragraphs. At step 302, the process detects that an access rights user interface is requested. The access rights user interface displays the access rights associated with the user and It can be configured to display the status of access rights. For example, the access rights user The interface is provided on the user device (e.g., downloaded from an app store). This can be provided by a dedicated application related to the ticketing provided by the user. In response to the use of the interface (e.g., in response to a request by a user), The application can then send the corresponding message to the system via the network. As a further example, the access rights user interface may be It can be accessed from the access control system 102 via the provided browser. The user device may transmit identification data associated with the user to the system. A user identifier and a password associated with a dedicated application provided on the user device. a unique code, a unique identifier associated with the user device, biometric data of the user, and and / or other identifying data.

[0086] At block 304, the identification data is accessed in a database record corresponding to the user. The database records the access rights associated with the user and the corresponding For example, a database record may contain information about the user to which the user has access. Events (e.g. unique event identifier, event name, event date, event venue, event seating location), whether and when a given access right was granted indication of the loan parameters (e.g., start and / or stop dates, start and / or stop times, to whom a given access right is granted, and other parameters disclosed herein. an indication of which access rights have been revoked (and the associated revocation dates) The access rights data may include, but are not limited to, the access rights of the user, the access rights of the user, and / or other access rights data as disclosed herein.

[0087] In block 306, the access rights lending rules may be retrieved from a data store. For example, access rights lending rules determine which access rights may be granted and when a given access right may be granted. how long a given access right can be loaned, and how much access can be loaned at a given time. How many access rights may be granted and for how long for a given period (e.g., month to month, year to year, etc.) How many access rights can be granted and how frequently a given access right can be granted which access rights may be revoked, and when the access rights may be revoked (if any) ), how many access rights loans can be repaid in a given period, etc.

[0088] In block 308, the rules engine uses the access rights rules and the access rights data to What access rights can be granted using the If this is not possible at the current time, when can such access be granted? determine which access rights, if any, can be revoked and / or which access rights cannot be revoked .

[0089] In block 308, the retrieved access rights, access rights status, and Which access rights can currently be loaned and when they can be loaned (if currently loaned) which access rights can be revoked and when The user device will display information about whether access rights can be reclaimed (or about access rights that cannot be reclaimed at present). This can be used to pre-populate the access rights user interface as well as send the This can be done.

[0090] In block 310, access rights are granted by a user via an access rights user interface. For example, the access rights specification can be You can specify the above access rights and the corresponding access rights lending and / or repayment specifications. For example, the access rights specification can specify the access rights that a user controls, the access rights You can specify the recipient, the access loan start state, and / or the access loan end date. As a further example, a reclaim access specification may specify the access rights that a user wants to revoke (e.g. For example, the user can use the reclaimed access rights or lend or grant the access rights to another recipient. or transferable), and the timing of collection (e.g., immediate or by a specified date or event) You can specify the time.

[0091] In block 312, the access rights rules are optionally re-run to determine the appropriate access rights loan / return. Whether the acquisition specification violates any rules and therefore the access loan / recovery specification The user can decide whether the access loan / recovery specification is allowed. If not, in block 314, a rejection notice is generated and the user device (e.g., a dedicated for display by applications, browsers, etc.) and / or electronic To (e.g., email address, short message service address, other electronic mail address) The information may be sent to a specific destination.

[0092] If the access right loan / withdraw specification is permitted, then in block 316, the corresponding For database records, by setting the database toggle accordingly , may be updated to record the access rights loan and / or redemption. , the designated recipient of a given access loan, and the recipient from whom the loan is being reclaimed. Notifications may be sent to the subscriber for display, for example, via a dedicated application, browser, etc. and / or to an electronic address associated with the recipient (e.g. , email address, short message service address, etc.) .

[0093] An exemplary retrieval process is now illustrated with reference to FIG. 4. By way of example, the process may include access control The system 102, user devices, and / or other devices or systems disclosed herein. In block 402, the specified A request to revoke the access rights granted to the access authority is sent to the access authority via the access rights user interface. The access control information is received from a user device associated with the access control user. Similarly, the access rights user interface displays the access rights and privileges associated with the user. For example, the access rights user can be configured to display the status of the access rights. The interface may be installed on a user device (e.g., downloaded from an app store) This can be provided by a dedicated application related to the ticketing provided. In response to the use of a user rights user interface (e.g., in response to a request by a user), In response, the application sends a corresponding message to the system over the network. As a further example, the access rights user interface may be The user device can access the access control system 102 through a browser provided on the user device. The user device may transmit identification data associated with the user to the system. The identification data to be provided includes a user identification number associated with a dedicated application provided on the user device. password, unique code, unique identifier associated with the user device, biometric information of the user The identification data may include associated data, associated with the user, and / or other identifying data.

[0094] In block 404, access rights retrieval rules are executed. For example, The collection rules determine which loan access rights may be revoked / recovered and how many over a given period of time. The number of access rights that can be reclaimed or the expiration date / time when a given access right cannot be reclaimed In block 406, the executed rule may indicate whether a specified time period exists. The system decides whether to allow the revocation of the loaned access rights that were granted. If it is determined that the reclaim of the loaned access right is not permitted, a denial notice is sent in block 412. The information is generated and displayed on the user device (for example, a dedicated application, a browser, etc.) for the purpose of the request), and / or electronic address associated with the user (e.g. email address, show The email may be sent to a designated messaging service address, other electronic destination, etc.

[0095] If the executed rules determine that the loan access rights should be reclaimed, then block 408 In the case of a request for access, the access rights are retrieved and the corresponding access rights records are updated accordingly in the database. In block 410, the user updates the item to reflect the withdrawal, for example by setting a toggle. The recipient of the loaned access and the access rights holder must be notified that the access rights have been reclaimed. A notification may be sent to a user who controls access rights for display. For example, the notification may be sent to a dedicated application. and a receiver device for display by a browser, etc., and an access right controller. device and / or the electronic address associated with the recipient (e.g., email address, shop the relevant electronic address of the access rights controller) The response can be sent to the address.

[0096] Thus, one aspect of the present disclosure is to provide a method for detecting a specified period and / or a specified event or Dynamic and optionally recoverable association of resources, such as physical locations, for a set of events The present invention relates to a method and system configured to provide digital access. The Access Locker may optionally provide access to a physical location, physical object, and / or other rights to the user. may be used to store data indicating the access rights of users and the status of such rights. can.

[0097] The methods and processes described herein may have fewer or additional steps or states. and steps or states may be performed in a different order. The methods and processes described herein do not necessarily require the implementation of one or more general purpose components. The present invention relates to a method and apparatus for performing the present invention, embodied in software code modules executed by a computer, through which the present invention It can be fully or partially automated. A code module can be any type of code. The method may also be stored on a computer-readable medium or other computer storage device. Alternatively, the entire system may be embodied in whole or in part in dedicated computer hardware. The systems described herein may optionally include a display, a user input device, (e.g. touch screen, keyboard, mouse, voice recognition, etc.), network interface The interface may include a surface, a substrate ...

[0098] The results of the disclosed methods may be used to store and / or store information on volatile and / or non-volatile memory (e.g., magnetic disk storage). Relational storage using EEPROM and / or solid-state RAM Any type of computer data, including databases and flat file systems It can also be stored in a data repository.

[0099] Various exemplary logic blocks, modules, and methods are described in connection with the embodiments disclosed herein. The rules, routines, and algorithm steps may be implemented using electronic hardware, computer software, or other It can be implemented as hardware, software, or a combination of both. In order to clearly illustrate this interchangeability with the The steps and methods have been generally described above in terms of their functionality. Whether it is implemented as hardware or software depends on the particular application. The functionality described depends on the design constraints imposed on each particular application. The present invention may be implemented in a variety of ways, and such implementation decisions are within the scope of this disclosure. This document should not be construed as causing a deviation from the

[0100] Additionally, various exemplary logic blocks described in connection with the embodiments disclosed herein may be implemented using the and modules may be general purpose processor devices, digital signal processors (DSPs), application specific Application-Specific Integrated Circuits (ASICs), Field Programmable Gate Arrays (FPGAs) or Other programmable logic devices, discrete gate or transistor logic, discrete hardware components of a computer or designed to perform the functions described herein. The present invention may be implemented or executed by any combination of these machines. The processor unit may be a microprocessor, but may alternatively be a The device may be a controller, a microcontroller, or a state machine, or a combination of these. The processor unit may be configured to process computer-executable instructions. In another embodiment, the processor unit may include an electrical circuit configured to An FPGA or other programmable logic device that performs logical operations without processing computer-executable instructions. A processor unit includes a combination of computing devices, e.g., a DSP Combined with a microprocessor, multiple microprocessors, and DSP cores Implemented as one or more microprocessors in combination with Although this specification mainly describes digital techniques, the processor device may also include It may also contain primarily analog components. A computing environment may be, for example, In other words, microprocessor-based computer systems, mainframe computers digital signal processors, portable computing devices, device controllers, or computing engines within consumer electronics devices, The present invention may also include a computer system.

[0101] Any method, process, routine, or algorithm described in connection with any embodiment disclosed herein The elements of the program are directly hardware and software modules executed by a processor unit. A software module can be implemented as a , RAM memory, Flash memory, ROM memory, EPROM memory, EEPROM memory memory, register, hard disk, removable disk, CD-ROM, or other The present invention may also reside in any form of non-transitory computer readable storage medium. The processor device is capable of reading information from and writing information to the storage medium. In the alternative, the storage medium may be coupled to the processor. The processor and the storage medium may be integrated into an ASIC. The ASIC can be embedded in the user terminal. The device and the storage medium may reside as discrete components in a user terminal.

[0102] Conditional language used herein, such as, among others, "can," "may," and "may" "may," "could," "might," "could," "for example," etc., unless otherwise specified. Unless otherwise specified, or understood within the context in which it is used, a particular embodiment does not necessarily refer to specific features, elements, and The general intent is to convey that embodiments include certain aspects and / or steps, and not others. Such conditional language may therefore be used to describe any feature, element and / or step that is more than one. It is understood that the above embodiments are in some way necessary, or that one or more of the embodiments may be implemented using other inputs or These features, elements and / or steps may be implemented in any particular embodiment, with or without prompting. This implies that the logic that determines whether a program is included or executed is necessarily included in the program. The terms "including," "having," and the like are synonymous and inclusive. The term is used expansively and does not exclude additional elements, features, acts, actions, etc. The term "or" is used in an inclusive (and not exclusive) sense, e.g. When used to connect a list of elements, the term "or" refers to any one of the elements in the list. It can mean one, some, or all.

[0103] Disjunctive language such as phrases like "at least one of X, Y, and Z" is used in the An item, term, etc. may be X, Y, or Z, or any combination thereof (e.g. For example, X, Y, and / or Z. Such disjunctive language is therefore understood to be in the context of At least one of, at least one of, Y, or at least one of, Z is present. It is not generally intended, and should not be intended, to require that

[0104] The term "click" refers to a user selecting a control, menu choice, etc. may use voice commands, text input, gestures, or other user input. User input may also involve the use of force. An example of user input is a text input. via a text field, and / or a menu selection (e.g., the user selects a check box) A drop-down menu, list, or The interface can be modified in many ways, such as through other arrangements, groups of icons that can be selected individually, etc. When a user provides an input or activates a control, the corresponding The computing system that receives the command can then execute the corresponding action. Any or all of the data, inputs and instructions provided hereunder may be stored in the system data store. (e.g., a database) from which the system can retrieve the data, inputs, and The notices / reminders and instructions set forth herein may be accessed and obtained by the user. The user interface may be a web page, a dedicated or non-dedicated phone application, computer applications, Short Message Service messages (e.g., SM S, MMS, etc.), instant messaging, email, push notifications, voice, pop The information may be provided via an up interface, and / or in other ways.

[0105] The user terminals described herein include mobile communication devices (e.g., mobile phones), laptops, tablets, interactive televisions, game consoles, media streaming devices Wearable devices, head-wearable displays, network watches, and other wearables The user terminal may be in the form of a computing device or the like. , user input devices (e.g., touch screen, keyboard, mouse, voice recognition, etc.), Network interfaces, etc.

[0106] The above detailed description illustrates, describes and points out novel features applicable to various embodiments. However, various omissions, substitutions, and alterations in the form and details of the illustrated devices or algorithms may be used. It will be understood that modifications and variations can be made without departing from the spirit of the present disclosure. As such, some features may be used or practiced separately from other features and ... Certain embodiments described herein may fall within the scope of the invention and may not provide all of the features and advantages set forth herein. The scope of the specific embodiments disclosed herein may be embodied in any of the following embodiments: The meaning and scope of the claims are as follows: and all changes that come within the range of equivalents are to be embraced within their scope.

Claims

1. 1. A physical location access control system comprising: A network interface; At least one processing device, providing temporary access to a first physical location via said network interface; a request from an access controller to provide a temporary access right to a first user, A request from an access controller providing an indication of a first period associated with an access right. Receive, The access controller pre-assigns the temporary access right to the first physical location. determining whether the first user is authorized to be provided with the first time period; The access controller pre-assigns the temporary access right to the first physical location. At least one of determining that the first user is authorized to provide the first user with the first time period. In response, at least in part, creating a temporary access record corresponding to said first time period; The access control for accessing the first physical location during the first time period. Revoke the access rights of the user, sending a message corresponding to the temporary access record to a destination associated with the first user; Send, The first access right is not assigned to the first access right during the first period of time. enabling the first user to access a physical location; and at least one processing device operable to: 。

2. The access controller pre-assigns the temporary access right to the first physical location. determining whether the first user is authorized to provide the first information during the first period of time; teeth, utilizing a history of temporary access rights provided by said access controller; A temporary access control request provided to the user by the access controller for a second period of time. Determine the number of access rights, the number of temporary access rights provided by the access controller over the second period of time; is less than a first threshold. The access controller pre-assigns the temporary access right to the first physical location. determining that the first user is authorized to provide the first content during the first period of time; The physical location access control system of claim 1 , further comprising:

3. The access controller pre-assigns the temporary access right to the first physical location. determining whether the first user is authorized to provide the first information during the first period of time; teeth, utilizing a history of temporary access rights provision associated with said access controller; The number of temporary access rights currently provided to the user by the access controller Decide, The number of temporary access rights currently provided by the access controller is less than a first threshold. In response, at least in part, to a determination that The access controller pre-assigns the temporary access right to the first physical location. determining that the first user is authorized to provide the first content during the first period of time; The physical location access control system of claim 1 , further comprising:

4. The system comprises: During the first period of time, from a device at the first physical location, a user communication device associated with the first user. a first hash including a hash of an identifier identifying the first user and an identifier identifying the first user; Receive the message, The identifier that identifies the user communication device associated with the first user and the first user the first hash including the hash of the identifier that identifies the first user; A second hash generated using data stored in a database record associated with the user. Compare with determining that the first hash and the second hash match; According to the purpose, the temporary access record is used, The first physical location is accessed based at least in part on the utilized temporary access record. transmitting a command configured to cause the indicator of the The physical location access control of claim 1 , configured to perform operations including: system.

5. The system comprises: During the first period of time, A device at the first physical location transmits a predetermined user ID acquired at the first physical location. receiving first biometric data of the user; storing the received first biometric data in a database record associated with the first user; Compare with the data provided, The first biometric data is stored in a database record associated with the first user. in response at least in part to determining that the temporary access record corresponds to the Use The first physical location is accessed based at least in part on the utilized temporary access record. transmitting a command configured to cause the indicator of the The physical location access control of claim 1 , configured to perform operations including: system.

6. a request to revoke the temporary access right to the first location from the access controller; Receive, determining whether said temporary access right is currently retrievable; in response, at least in part, to determining that said temporary access rights are not currently retrievable; and sending a retrieval failure notification to said access controller.

2. The physical location access control system of claim 1, configured as follows:

7. The temporary access right provides access to a first event of a set of events.

2. The physical location access control system of claim 1 , comprising:

8. The temporary access rights provide access to a specified area within the first physical location.

2. The physical location access control system of claim 1 , comprising:

9. a synchronization request at least in part in response to providing the temporary access right to the first user; and recording the token in a distributed database.

2. The physical location access control system of claim 1 .

10. 1. A computer-implemented method comprising: In the computer system, a first period of time is and providing a first access right to the first user, the first access right being retrievable by the access right controller. a set including the retrievable first access rights associated with the first physical location, receiving a request from the access rights controller having an access right of in response, at least in part, to the request from the access rights controller; providing said retrievable first access right to said first user. recording the instructions in a database; The access rights controller accesses the first retrievable access rights associated with the first physical location. revoking the ability of the user to utilize the access rights of the The access right controller transmits information regarding the first access via a network. receiving a redemption request; determining whether the revocable access rights are currently revocable; at least in part by determining that the revocable access right is currently revocable; depending on, recording an indication in a database regarding said revocation of said revocable first access right; The access rights controller accesses the retrievable first access associated with the first physical location. Enabling the ability to utilize the access rights; utilizing the retrievable first access right associated with the first physical location. and revoking the ability of one user.

11. The step of determining whether the revocable access right is currently revocable comprises: determining whether the first user has utilized the retrievable access rights; The computer-implemented method of claim 10 further comprising:

12. The step of determining whether the revocable access right is currently revocable comprises: determining whether a current time is included in the first time period.

11. The computer-implemented method of claim 10.

13. a history of access rights provision associated with said access rights controller, said history being associated with said access rights controller for a second period of time; The number of access rights provided to the user by the access right controller over a period of time Based at least in part on a history that includes The access right controller grants the first access right to the first physical location. determining whether the first user is authorized to provide the The computer-implemented method of claim 10 .

14. Among the access rights related to the access right controller, based, at least in part, on the number of access rights currently provided to the user by the The access right controller grants the first access right to the first physical location. determining whether the first user is authorized to provide the The computer-implemented method of claim 10 .

15. The first access right provides access to a first event of a set of events.

11. The computer-implemented method of claim 10, comprising:

16. The first access right provides access to a specified area within the first physical location.

11. The computer-implemented method of claim 10, comprising:

17. At least in part in response to providing the retrievable first access right to the first user.

11. The method according to claim 10, further comprising the step of recording the token in a synchronous distributed database according to the The computer-implemented method described herein.

18. A non-transitory computer-readable memory storing instructions, the instructions being for one or more computers. When executed by a computer system including a computing device, In the system, Providing a first user with retrievable access rights to a first physical location for a first event receiving a request from a requestor at a first time for providing the request to the user; The requester receives the collectable request for the first physical location for the first event. determining whether the first user is authorized to provide a suitable access right to the first user; The requester receives the collectable ticket for the first physical location for the first event. at least in determining that the first user is authorized to provide the first user with sufficient access rights; In response, at least in part, providing the first user with the retrievable access rights to the first event; and create a corresponding access provision record. the requester for access to the first physical location for the first event. Revoke access to Sending a message corresponding to the access provision record to a destination associated with the first user. Believe, The first event occurs without a token corresponding to the retrievable access right. enabling the first user to access the first physical location for A non-transitory computer-readable memory that causes a computer to perform operations including:

19. The requester grants the retrievable access rights to the first physical location to the first user. Determining whether a user is permitted to provide utilizing a history of provision of the retrievable access rights associated with the requester; Retrievable access rights provided to the user by the requester for a second period of time. Determine the number of The number of redeemable access rights provided by the requester over the second period of time exceeds a first threshold. in response at least in part to determining that the The requester receives the collectable request for the first physical location for the first event. determining that the first user is authorized to provide such access rights to the first user; 20. The non-transitory computer readable memory of claim 18, further comprising:

20. The requester receives the collectable request for the first physical location for the first event. determining whether the first user is authorized to provide such access rights to the first user; teeth, utilizing a history of provision of retrievable access rights associated with said requester; determining the number of retrievable access rights currently provided to users by the requester; determining that the number of retrievable access rights currently provided by the requester is less than a first threshold; At least in part, depending on the The requester receives the collectable request for the first physical location for the first event. determining that the first user is authorized to provide such access rights to the first user; 20. The non-transitory computer readable memory of claim 18, further comprising:

21. The operation includes: from a device at the first physical location, a user communication device associated with the first user. a first hash including a hash of an identifier identifying the first user and an identifier identifying the first user; Receive the message, The identifier that identifies the user communication device associated with the first user and the first user a first hash including the hash of the identifier that identifies the first user; and a second hash generated using data stored in a database record associated with the Compare, determining that the first hash and the second hash correspond to each other; Depending on the situation, the access provision record is used, The first physical location based at least in part on the utilized access provision record. sending a command configured to cause the indicator to provide an access permission indication; 20. The non-transitory computer readable memory of claim 18, comprising:

22. The operation includes: A device at the first physical location transmits a predetermined user ID acquired at the first physical location. receiving first biometric data of the user; storing the received first biometric data in a database record associated with the first user; Compare with the data provided, The first biometric data is stored in a database record associated with the first user. utilizing the access provision record in response at least in part to determining that the access provision record corresponds to the data. death, The first physical location based at least in part on the utilized access provision record. sending a command configured to cause the indicator to provide an access permission indication; 20. The non-transitory computer readable memory of claim 18, comprising:

23. The operation includes: receiving a request from the requester to revoke the access right to the first location; determining whether the retrievable access rights are currently retrievable; at least in part by determining that the retrievable access rights are not currently retrievable; 20. The method of claim 18, further comprising the step of: responsively sending a retrieval failure notification to the access rights controller. A non-transitory computer readable memory as described herein.

24. The retrievable access right is for accessing a first event of a set of events.

20. The non-transitory computer readable memory of claim 18, further comprising a command for executing the command.

25. The retrievable access rights include access to a specified area within the first physical location.

20. The non-transitory computer readable memory of claim 18, further comprising a command for executing the command.

26. The operation includes: At least in part in response to providing the retrievable first access right to the first user.

20. The method of claim 18, further comprising: recording the token in a synchronous distributed database upon receipt of the token. The non-transitory computer readable memory.

Images