A LOCAL NETWORK-CONNECTED, MULTIPLE-PARTICIPANT, HARDWARE-FREE AUDIO TOURISM GUIDING SYSTEM AND METHOD VIA MOBILE DEVICES.

Abstract

The invention relates to a system and method developed for use in group guiding activities in the tourism sector, enabling voice communication via internet-connected mobile devices. The invention system is characterized by a guide starting the guide processing module (1a) with the guide device (1) and starting the broadcast related to the visit with the broadcast module (2) and enabling visitors to access audio and visual information by scanning the QR code (3) created by the server and broadcast router (4) with the visitor devices (5) during a tourist visit, as shown in Figure 1.

Description

1 TARIFF LOCAL NETWORK CONNECTED, MULTIPLE VIA MOBILE DEVICES PARTICIPATORY AND EQUIPMENT-FREE AUDIO TOURISM GUIDING SYSTEM AND METHOD TECHNICAL FIELD The invention is intended for use in group guiding activities carried out in the tourism sector. developed for voice communication via internet-connected mobile devices. It is related to a system and method that enables its establishment. STATE OF THE ART Nowadays, guiding services on group tours are mostly provided using radio-based equipment. This is carried out through systems. In these systems, the guide's voice is transmitted at a specific frequency. The information is transmitted to tourists via a transmitter device operating between these intervals, and each The participant needs to carry headphones and a receiver device in order to receive this broadcast. 15 This structure; • High equipment costs (daily rental per tool), • Logistical issues (charging, maintenance, hygiene), • Lack of flexibility, • Limited accessibility (especially in rural areas or regions with limited infrastructure), 20 This leads to problems such as these. Furthermore, the digital integration of these systems is limited, and statistical analysis and multilingualism are also restricted. It fails to meet modern user expectations, such as support and content saving. Today, guiding systems used in group tours are largely radio-based. It is based on hardware infrastructures. In these systems, guides are a transmitter 25 They broadcast their own voices via the device over specific radio frequencies, Participants need special receiving devices, and usually one, to receive this broadcast. They need to use disposable headphones. These systems, in particular, are used. It operates in unlicensed bands such as 863–865 MHz, and has limited coverage. It is susceptible to technical problems such as channel conflicts. 30 This structure leads to several problems, including the following: i. High equipment costs: 2 Daily rental cost of a 30-person radio guide system for a typical group tour. The price ranges between 1,500 and 2,000 TL. The system includes a transmitter, receiver, headphones, and spare parts. It consists of components such as batteries and is often determined by the organizing company. It must be sourced externally. For long-term use, however, purchasing is necessary. The costs are quite high. 5 ii. Logistic and operational challenges: The equipment must be charged, cleaned, and transported before each trip. This is also necessary. Additionally, frequency adjustment, device matching, and signal processing are required among the equipment. Technical procedures like testing require expertise, which increases the preparation time before the tour. It prolongs. 10 iii. Hygiene risk: Headphones are frequently used by different users. They are disposable. Despite the preference for ear pads, this situation is problematic for users. this is causing discomfort; however, the increased hygiene awareness in the post-pandemic era... makes the discomfort more pronounced 15 iv. Lack of flexibility: Radio systems operate within physical limitations and have an average range of 50–100 meters. This is especially true for outdoor tours (e.g., archaeological sites, hiking). During hiking trails (or crowded city tours), the guide informs each individual in the group. It can make it difficult to reach them. 20 v. Access issues: Hardware-based systems only work in certain areas and are prone to failure / missing parts. Equipment conditions negatively affect the tour experience. For example, in rural areas. It is possible that sufficient equipment may not be available in the regions or during peak seasons. Furthermore, the digital integration of these systems is quite limited. The current radio 25 systems: • It does not save participant data, • You cannot share content (images, text, maps) during the presentation. • It does not have the infrastructure to allow audio translation into different languages. • It does not support feedback, analysis, or reporting functions. 30 In conclusion, traditional radio systems do not meet today's user expectations. (personalized, data-driven reporting, hygiene and low cost) response 3 It is unable to provide these solutions; this reveals the need for modern, digital, and software-based solutions. It places. Document number WO0070851A1, “Self-assisted tour guide” It offers a system and method. Traditional tour guide equipment, rental It is not practical because it requires a procedure. The invention's system is a public communication network, 5 It includes a voice service system connected to the public communications network and user telephones. The service system includes an audio database that stores descriptions of the relevant tour destinations. A user's phone is dialed and connected to the voice service system via the public communications network. Access is provided. The voice service system is accessed via a dialed number from the user's phone. It searches for audio data of a tour destination introduction corresponding to a phone number, and these 10 "It transmits the data to the user's phone via the public communication network." It has been summarized. Document number US2014136100A1, “Vehicles equipped with smartphones and GPS. designed to run on mobile computing devices such as 15 an improved automated tour guide system and method, replacing human tour guides tours based on changes in user interests and preferences and tour routes. to better replicate their natural ability to customize their guides, To provide more natural transitions between various tour stories and to enable the user to choose which 20 The system is designed to provide tour guide media with control and preference metadata. It includes comprehensive descriptions of third-party media obtained from remote servers. The tour guide can use and control the audio, text, graphic, and URL output for users. To do this, we use geographic map data, user location, direction of movement, and speed. It uses it intelligently. The system also stores the user's tour location and media playback history. It tracks this history and can use it to further optimize its performance.” This is a summary of the situation. DEFINITION OF INVENTION The present invention aims to eliminate the aforementioned disadvantages and the related technical 30 It relates to a system developed to bring new advantages to the field. 4 The main purpose of this invention is to improve guiding services in group tourism activities. by digitizing; a user-friendly, low-cost, hygienic and internet-based voice response system. The goal is to provide communication infrastructure. Traditional radio systems are hardware dependent. operational challenges and lack of digital integration encountered It was developed to eliminate limitations. The invention; without equipment, very 5 participatory and low-latency audio guidance, secure access, and manageability. by combining it with its principles, to technical and operational problems encountered in the field. It offers an integrated software-based solution. Adaptive audio transmission, signed QR access, The system's guide includes KYC, payment-based onboarding, and provider switching components. It supports its originality and industrial applicability. 10 The invention, in general terms; • (A) Hardware-Free Model: Each participant uses their own phone to access the directory. He turned on the "audio only" live room connection, • (B) Access Method: Room entry is via signed and timed QR / URI, password and 15 Checked with an (optional) paid ticket, • (C) Guide KYC: Document-based authentication of guides authorization, • (D) Low Latency: Dynamic packet size sensitive to network conditions (20 / 40 / 60 (ms), adaptive jitter buffer, FEC / PLC with ≤200 ms p95 latency target, 20 • (E) Management / Moderation: KYC queue, room locking / termination, Provider switching (e.g., Jitsi↔Agora) and audit log, • (F) Multiple Languages / Content: Parallel language rooms, route notes, and recorded narratives are all available. It provides a system and set of methods that enable management on the platform. The specific objectives in the development of the invention were: 1. Eliminating the Need for Hardware: External transceiver systems are used to transmit the guide's explanation to the participants, Ending dependence on wireless headphones or physical equipment. The system It only works with users' own smartphones and personal headphones. 30 2. Hygiene and Reducing Contact Risks: By preventing devices from passing from hand to hand, especially in the post-pandemic period To offer a hygienic solution based on individual use, which is becoming increasingly important. Users He only uses his own devices and accessories. 3. Reducing Costs and Ensuring Economic Sustainability: By eliminating costs such as equipment rental, transportation, maintenance, and refurbishment, 5 more economically accessible for both individual guides and tour operators to develop an alternative. 4. Expandable via Internet Connection and Ubiquitous (everywhere) Establishing (accessible) infrastructure: Participants can access the site from anywhere in the world via different mobile platforms. a cloud-based system that allows participation in the session via internet connection To establish this system, it will be suitable not only for physical tours but also for virtual guidance or hybrid tours. It is also suitable for events. 5. Developing a Modular and Extensible Software Infrastructure: Beyond basic voice transmission functionality, the software architecture is modular, with 15... By designing it, the following additional functions can be optionally integrated into the system. to be made into: • Multilingual support (real-time translation or subtitles), • Session recording and content archiving, • Gathering data such as the number of participants and connection time, 20 • Tour itinerary synchronization and media content sharing. • Guides upload their pre-recorded narratives to the system, providing additional information for tourists. This allows them to access this content for a fee. Tourists can make their guide choices. It does this based on ratings and content quality; thus, guides are digital content. can generate income from it. 25 6. Ensuring Easy Participation and Usage Flow: An automatic QR code or link (URL) for each publication initiated by the guide. (3) produced so that tourists can do it in seconds without needing any technical knowledge. to enable participation in the system. 7. Providing a High-Quality Audio Experience with Low Latency: 30 Voice is transmitted without delay via compressed data packets through the mobile application. a broadcast that ensures uninterrupted and high-quality access to participants' devices. Developing algorithms. 6 8. Supporting Education, Academia, and Remote Interaction The system is not only for guiding activities; it is also for tourism students, guidance training where academics and educators can come together a digital platform where information can be shared via remote participation It can be used in this way. Thus, the flow of sectoral information is accelerated. 5 9. Contributing to the Promotion of the Country Through Accurate and Reliable Information Flow Tourist areas of countries through official, licensed and verified guides by promoting it; tourism manipulation, misleading content and false information To prevent problems such as navigation. Thus, both domestic and international tourists They are provided with safe and accurate information. 10 10. Creating a Database-Based Decision Support System The number of participants, the destinations of interest, the levels of interest over time, and Tourism with a software reporting infrastructure that analyzes user behavior. decision support processes such as planning, advertising expenditures, and seasonal planning To provide information. 15 11. Creating a Potential Tourist Pool for Tourism Agencies User preferences on the app, viewed presentations, and destinations of interest. data that travel agencies can use for targeted marketing to present clusters; so that the application also serves as a B2B marketing channel to make it work as. 20 The system developed for these purposes offers alternatives to classic hardware-based solutions. compared to others, it is more efficient in terms of technology, operations, and economics. It creates a sustainable and user-oriented alternative. The system also different types of tourism (cultural tours, museum visits, outdoor activities, academic 25 It has great adaptability potential for field studies, etc. The invention plays core roles in achieving its purpose within the system; - Access to the room corresponding to the visited area via QR code or link within the system, If applicable, 30 people who have paid for the password and service, listen to live audio, and can answer surveys. tourist, 7 - after registering with the system and completing document-based identity verification (KYC), the room creating, generating a password or QR code specific to the visitor area, and initiating a guidance broadcast. a guide that terminates, manages participants, and allows them to view their reports and income, if any. - reviewing guides' document-based identity verification (KYC) applications (Approval / rejection / requests additional documents), handles complaints, locks / terminates the room if necessary. 5 a moderator who can do this but cannot touch system settings, - Policy / commission settings, provider (Jitsi / Agora) switching, security settings, capable of reporting / exporting and having all system permissions, including role assignment. Includes administrator. In addition, the system includes 10 features such as user tickets / refunds and basic account support. Support processes that perform transactions such as payment / refund reports and reconciliation. financed by a partner who can manage their own guides and tours, and Webhook / automation processes (OTP, KYC webhook, report emails) The system account performing the calculations also includes supporting roles. The invention relates to the guide's access to the application, role selection, and document-based system for the guide. The process involves a series of steps, including identity verification (KYC). Registration Once completed, the guide is assigned a role that gives them permissions such as "opening rooms". Drawings 20 The present invention, briefly summarized above and discussed in more detail below, applications of the invention, example applications of which are depicted in the attached drawings. This can be understood by referring to the reference. However, the attached drawings are only typical of this invention. It describes the applications and inventions, and therefore, other equally effective ones. Since it may allow applications, it cannot be assumed that it limits its scope. 25 It should be noted. Figure 1 is a block diagram showing the overall architecture of the system. To make it easier to understand, indicate the identical elements that are common to the shapes. For this purpose, identical reference numbers have been used where possible. Figures are to scale. It is not drawn and can be simplified for clarity. The elements of an application and Its features are useful to other applications without needing further explanation. It is thought that it can be included in this way. 8 Explanation of Details in the Drawings The corresponding reference numbers shown in the figures are given below. 1- Guide device 5 1a- Guide operation module 2- Publishing module 3- QR code and link generator 4- Server and broadcast router 5- Visitor devices 10 DETAILED EXPLANATION OF THE INVENTION This detailed explanation describes the method of invention and the preferred structure for this method. The alternatives suggested were presented solely for the purpose of better understanding the subject and in no way... It is explained in a way that will not create a limiting effect. 15 The invention system, as shown in Figure 1, is designed for use by a tour guide during a tourist visit. with the device (1) start the guide processing module (1a) and visit with the broadcast module (2) to start the related broadcast and created with QR code and link generator (3) 20 on the connection server and broadcast router (4) open broadcast for visit. visitors can broadcast by scanning the QR code (3) generated with their visitor devices (5). by enabling them to access audio and visual information by entering their room It has been characterized. The invention relates to the procedural steps that the guide will follow in the system, 25 A. Introduction to the Application and the "Become a Guide" Flow S1. Access: The guide opens the application (web / PWA / native). The system displays the device, language, and time. It detects the slice. S2. Initial Screen: The options “Log in”, “Quick registration”, and “Become a Guide” are displayed. S3. Role Selection: The guide selects “Become a Guide”; the system enters role=requested=GUIDE 30 It initiates the application flow with the parameter. S4. Data Protection Law (KVKK) Information: KVKK / GDPR texts and explicit consent checkbox are mandatory. It is presented as such; progress is blocked if it is not checked. 9 B. Account Creation and Contact Verification S5. Registration Form (Personal): Required fields: Name-Surname, e-mail, phone number, date of birth, Country / city, preferably IBAN (if they want to receive payments). S6. Field Validation: Client-side instant form validation (email regex, Phone number E.164, IBAN mod-97). A red warning will be displayed on the form if there is an error. 5 S7. OTP Delivery: The system will send a one-time verification code via email or SMS. produces (OTP); ttl=10 min, rate limit=3, backoff=exponential. S8. OTP Authentication: The guide enters the 6-digit code; the system server (4) side The system cancels the code after three failed attempts and provides a regeneration flow. S9. Account Pre-Creation: If verification is successful; user.status=PENDING_KYC, 10 A record is created in the system with the username user.role=CANDIDATE_GUIDE. C. KYC (Knowledge and Guidance Document) Verification S10. Document Upload Screen: • S10.1 Photo of ID (front / back) or passport, • S10.2 Guidance document image / PDF and license, 15 • S10.3 Selfie liveness shooting (guide guided) (with animations). Files undergo local size / resolution checks (e.g., min 600×400 px, max MB, JPG / PNG / PDF only). S11. Pre-processing (Client Side – Optional): Light / rotation detection, framing assistance; 20 If necessary, the guide will be shown a "clearer shot" alert. S12. Secure Transfer to Server: Documents are uploaded via TLS and stored in temporary storage; Instead of permanent storage, data is routed to the KYC provider (data minimization). S13. KYC Provider Integration: • S13.1 The system submits the application to the KYC API with the submission_id. 25 • S13.2 KYC provider OCR + face matching + document validity checks does. • S13.3 Result; via webhook or polling: APPROVED | REVIEW | REJECTED It returns as is. S14. Situation Management: 30 • APPROVED → Proceed to S15. • REVIEW → Notification to the guide is "under review"; queued in the moderator panel. It is taken. • REJECTED → Reason for rejection in guide + Update Document / Try Again A connection is provided (max N repetition policy). S15. Role Assignment and Secure Session: When confirmed, the system will configure user.role=GUIDE. Set kyc_status=APPROVED; signed token for one-click access to the "directory panel". Produces (JWT / opaque, exp≤1 hour). 5 D. Bank / Payment (Optional Initial Setup) S16. IBAN Verification: IBAN format check and microtransfer (optional) Verification; if it fails, only free rooms may be allowed. E. Completing Onboarding and First Session S17. Onboarding Checklist: “Profile complete, KYC approved, microphone test 10 "Completed" progress bar; links for missing information. S18. Notification Permissions: The guide will be asked for push / email preferences (at the start of the tour). reminders, etc.). S19. First Room Guide: “New Room → Title / Date / Password → Generate QR → Start Broadcast” A mini tour description is displayed (can be turned off). Through these actions, the guide opens a room in the system and 15 They can provide narration and information to visitors and charge a fee for this service. They are able to win. The invention can recover from errors that may occur in the guidance process steps of the system. in exception flows; 20 • OTP could not be received: “Resend code” backup channel (email↔SMS switch), cooldown=30 sec. • Liveness Failed: Guide redirects to "insufficient light / out of frame," maximum 2 Again, then referral for manual review. • Document Could Not Be Read: If the OCR confidence score does not exceed the minimum threshold, a message (example 25) will be sent to the user. Reloading with visual / hint assistance. • KYC Rejected: Reason visible (date mismatch, document type not supported) etc.), re-upload link + submit question to moderator. • Multiple Applications / Conflict: Same ID number in different accounts → “with existing account” The "merge" stream requires moderator approval. 30 • Network Interruption: Resumable transfer during uploads; 3 failed. The test involves switching to simple loading mode. 11 The following are security, privacy, and compliance notes for the guidance process in the invention system: The transactions are carried out. • Transmission Security: All data over TLS 1.2+; media and file uploads. Limited-time access via timestamped signed URLs. • Data Minimization: KYC images are not permanently stored in the system; only 5 The provider reference ID is stored. • Access Control: GUIDE_PENDING during application, after approval. GUIDE role; rate limit + CSRF at sensitive endpoints. • Logging / Auditing: Application, document upload, decision (approval / reject), and role. Change events are recorded in a signed log with information on who, when, and from where. 10 • KVKK / GDPR: Explicit consent texts, data processing inventory, retention period (e.g. KYC result + referral ID → legal validity period; raw images are with the provider). In the directory account, the status machine operations are as follows: UNREGISTERED→(S5–S8)→PENDING_KYC→(APPROVED|REVIEW| 15 (REJECTED) operations occur and here, • APPROVED: role=GUIDE, panel access is enabled. • REVIEW: Moderation queue, results notification. • REJECTED: Possibility of re-application (N≤3), otherwise closure / appeal process when done, data structures are also; 20 • user_id, full_name, email, phone_e164, dob, country, iban?, consent_kvkk_at kyc_submission • submission_id, user_id, doc_type, status, provider_ref, score, created_at, updated_at 25 audit_log • It includes event_id, user_id, action, ip, ua, ts, and details (json) codes. Measurable acceptance criteria in the guide account; • OTP validation success rate ≥ 98% on the first attempt; median recording time ≤ 5 min. • KYC p95 completion time ≤ 7 min; rejection → retry rate ≤ 20.30 • Access to the guide panel after successful approval takes ≤ 2 seconds (with signed token). • Form field error rate ≤ 3% (with real-time hints to the guide) It has been characterized. 12 The invention includes the following alternative implementations for alternative operations of guides in the system: It is like that. • Passwordless Login: Login via email / SMS magic link; The contact ID is again linked via KYC. 5 • Corporate Directory: Corporate verification + directory list import; individual Institutional approval instead of KYC. • Passport Only: Passport + face verification for international guides; Institutional letter instead of a guiding license. In the invention system, the tourist scans the QR code (3) provided by the guide to access the room entry page. its orientation, processes that enable it to join a low-latency audio-only session. The system performs this function. For tourists, it offers a timed / passwordless variant and automatically activates in case of network interruption. It includes recovery mechanisms. Here, the processes and flow carried out for the tourist are described. as; 15 A. Room Access (via QR) T1. QR Display: The guide displays the QR code (3) generated by the system, tour start It shares this information with tourists either on-site or online. At least within the QR code. An access URI signed with the parameters room_id, nonce, and exp (expiration). It is found. 20 T2. Scanning: Scan the QR code using the tourist device camera or the QR Scanner module in the application. reader. T3. Procedure: The application verifies the QR content (signature / time check) and It redirects the user to the Room Login screen. If the signature is invalid or the experience has expired, T3a An exception stream is triggered (detailed in the exceptions and error recovery section). 25 B. Authorization to the Room T4. Access Type Control: The system reads the room settings: • Encrypted Access: A room password is required to enter the room. T5. Password (If applicable): The password field appears on the screen. The tourist enters the password provided by the guide or... Enter the room password received from the on-screen instructions. Server (4) room-based timed hash 30 with confirms. C. Room Participation and Sound Flow 13 T6. Media Preparation: The client connects to the room as a listener only. If necessary... Notification permission is requested; microphone permission is not required for the listener (if there is no speaker). as long as). T7. Low Latency Session: Server (4) streams audio only to the tourist client. It distributes its parameters (codec=Opus, bitrate adaptive, frame=20 / 40 / 60 ms). 5 T8. Playback: Audio streaming starts automatically when you log in or in the large Playback menu. It is started with the button. The screen displays the Volume slider, remaining time, and (optional) Emoji / reaction appears. T9. In-Session Recovery: Jitter buffer / adaptive response in case of network fluctuations. Acoustic continuity is maintained via bitrate; automatic reconnection in case of interruption. 10 D. Session End and Feedback T10. Survey: When the guide ends the broadcast, the tourist screen will display a 1-5 star rating and a short text. The survey with a field is visible. T11. Registration / Personalization (Optional): Tourists can choose their language preference or city for future tours. You can save areas of interest. 15 As a result of these procedures, the tourist user will receive information about the visited area from an authorized guide. so they can receive information, plan their next visits, and make the payment. is able to accomplish this. The system incorporates the following processes for tourists in terms of security, privacy, and compliance: is carried out; • Signed QR / URI: QR content includes digital signature and expiry (exp); server (4) You cannot log in without verification. • Password Management: Room passwords are time-limited and periodically updated to prevent easy sharing. It has a renewal option; verification is done on the server (4) with salted hash. • Data Minimization: Tourists' personal data is collected to a minimum extent; theft is prevented. During this process, media is transmitted over SRTP / TLS. • Logging: Critical events (QR verification, OTP, password verification, payment) It is written to the timestamped audit log. 30 From a tourist's perspective, the situation machine is UNAUTHENTICATED → SCANNED_QR → (OTP_PENDING → VERIFIED) → (PASS_REQUIRED? → 14 PASS_OK) → (PAY_REQUIRED? → PAID) → JOINED → SURVEY → DONE It is structured as such, • SCANNED_QR: QR signature / time verification is valid; room metadata is retrieved. • JOINED: Connected to audio broadcast; RECONNECTING in case of network disconnections. The situation is supported. 5 The invention addresses exceptional flows and rescue opportunities for tourists within the system; • T12 – Invalid / Old QR: The screen displays "Your connection is invalid / expired." "Minibus" alert and refresh button; a new QR code is requested from the guide. • T13 – Network Interruption: “Reconnecting (3…2…1…)” progress indicator; ≤ 10 3-second target; "Retry" button if failed. • Guest Continuation (optional): Valid until the end of the tour, ephemeral identification; There are procedures for offering to convert accounts to permanent accounts before the survey begins. The invention system includes Measurable Acceptance Criteria (KPIs) for tourists, QR → Room Page 15 Median connection time ≤ 2 seconds (including signature / express verification) and reconnection time ≤ 3 seconds; The p95 audio latency is ≤ 200 ms. The invention presents alternative realities for tourists within the system; • Password-free Room (Token-only): The access token in the QR code is sufficient; 20 Sharing is subject to time / scope limitations. • Device Key: The key connected to the device during initial verification. Continue without OTP on subsequent logins (registered device). • Group Ticket: A single payment generates N access tokens; each person receives their own. He / She participates with his / her device. 25 • Guest Login (No-KYC): Data is anonymized after the tour ends; permanent membership. The incentive will be given after the survey. In the invention system, the Room Entry interface for the tourist includes: title, guide name, starting point. Listening Screen 30 with time, password field (if any), quick registration and login fields. On the interface; play / pause, volume level, remaining time; at the top, in case of interruptions. The message "Reconnecting..." is displayed. In the invention system, the administrator (admin) user's login, authentication, and directory – In the end-to-end management of the tourist audio room platform; - System policies / settings, KYC results, room moderation, provider switching and as the user with reporting privileges, the Administrator, - Limited privileges, KYC and content / room moderation, and system settings 5 Non-interfering Moderator, - KYC Provider for third-party services that handle identity / verification processes, - Live audio transmission infrastructure (e.g., Jitsi / Agora) RTC Provider, - The Room, which is an audio-only live session area opened by the guide, - Risk-based access and multi-factor authentication (RBA / MFA), 10 - There is an Audit Log containing a signed / time-stamped audit record. The system allows the administrator user to log into the panel with strong authentication. to monitor KYC applications and room / access processes, provider managing switching and security policies, reporting and data retention 15 It includes the execution of its functions. All critical actions are written to the audit log; Automatic rate reduction (rate limit, logout, rollback) in case of failure / doubt. It is implemented as a workflow in the manager's operations; A. Administrator Login and Session Security A1. Access: Accesses the administrator management URL (web / PWA / native admin mode). 20 A2. Identity Information: Email / username + password are entered; tiered on the server (4) side Verification is initiated. A3. RBA (Risk Score): IP address, device fingerprint, geography, time zone, failed attempts. A risk score is generated using signals such as the number of cases. A4. MFA: If the risk score threshold is exceeded, MFA (TOTP, push, FIDO2) is mandatory; 25 MFA may also be required at low risk (policy based). A5. Session Generation: Short-lived access token (JWT / opaque) upon successful verification. (exp ≤ 1 hour) + refresh token is generated; session httpOnly and SameSite They are secured by their flags. A6. Authorization Scheme: Server role=ADMIN / MODERATOR and fine-grained permission set 30 (RBAC / ABAC) loads. B. Main Panel (Dashboard) and System Status 16 B1. Status Cards: Active rooms, participant numbers, late / missed information summaries, KYC queue, incident / complaint counter. B2. Warnings: Warnings for threshold overruns (p95 delay, error rate, increase in failed KYC) cards and email / push. C. KYC Application Management 5 C1. Queue View: Applications are listed in the card list; KYC provider result for each card. (APPROVED / REVIEW / REJECTED), risk score, document previews. C2. Card Review: Administrator zooms in on ID / guideline document; OCR verification verifies They see their score and liveness report. C3. Decision: 10 • Approve: user.role=GUIDE, kyc_status=APPROVED. • Reject: A reason code is selected; the user is automatically notified. • Request Additional Documents: Invitation to upload (time-limited, signed link) to the user. C4. Audit: The decision, actor, and timestamp are written to the audit log. D. Room / Content Moderation 15 D1. Room List: Active / passive; number of complaints, simultaneous listeners, access type (password / fee). D2. Instant Transactions: • Lock the Room: Prevents new entries (protecting existing listeners). • End Room: Emergency shutdown; notify listeners; if recording, 20 Secure closure. • Password Reset: Generates a new password with a time limit in case of suspected data breach (within N seconds) (it comes into play). D3. Violation Flow: Inappropriate content / name; for evidentiary purposes after one-click termination. Minimal metadata retention (for the duration of the policy). 25 E. Provider Management (RTC and Edge Infrastructure) E1. Provider Status: Delay / error metrics from providers like Jitsi / Agora, room threshold values ​​per unit. E2. Automatic Switching: Upon threshold exceedance, the system switches to a second provider that is "on standby". It implements the drain & switch plan. 30 E3. Manual Switching: The administrator clicks “Change Provider”; short link The health test runs (microphone / output verification). Automatic rollback if the test fails. E4. Audit: The switching event is logged in detail. 17 F. Finance / Fee Policies (Optional) F1. Commission & Currency: Commission rate, currency, refund / coupon rules; historical change. F2. Ticket → Access Automation: The access list is updated when the order is completed; Bulk refund / cancellation in the admin panel. 5 G. Security & GDPR / DPR Management G1. Policy Screen: Password / MFA requirement, session duration, password frequency, data Retention periods. G2. Data Requests (DSAR): “Download / delete my data” request queue; SLA tracking. G3. Logging / Audit: All critical actions (login, KYC decision, room closure, 10 (Switching, policy change) is recorded with a signature. H. Reporting & Analytics H1. Operation Dashboard: Participants per room, listening time, dropout rate, p95 delay. H2. Satisfaction: NPS / survey results, distribution of violations / complaints. 15 H3. Export: CSV / Excel, scheduled report email. The processes are carried out. The invention addresses the following issues for the administrator in terms of exception flows and error mitigation within the system: The transactions are carried out. 20 • Access Barrier (Excessive Risk): MFA is mandatory for attempts exceeding the RBA threshold; 5 The account will be temporarily locked and IP speed limited after the failed attempt. • Token Theft Suspected: All sessions cancelled in case of simultaneous session anomaly. Email + password reset notification. • KYC Provider Fee: Items in the queue will be subject to manual review; the user will receive a 25 "Under review" notification. • Switching Failed: Automatically triggers if the connection health test fails. Rollback; user sessions are transferred back to the old provider with minimal disruption. • Payment Webhook Delay: If the order status remains pending, the admin will receive it. It retrieves status from the gateway using "force synchronization" and processes it in audit. 30 The invention describes the following processes as State Machines for the administrator in the system: is carried out. 18 1- Admin Session Statuses LOGOUT→CREDENTIAL_CHECK → (MFA_REQUIRED?) → SESSION_ACTIVE → (IDLE_TIMEOUT?) → LOGOUT • MFA_REQUIRED: MFA required by RBA threshold or policy; SESSION_ACTIVE The short-lived access token is renewed during the transition. 5 2- KYC Application Statuses (Manager's Perspective) SUBMITTED→(AUTO:APPROVED / REVIEW / REJECTED)→(ADMIN:APPROVE / REJECT / REQ_DOC) → CLOSED 5.3 Room Management Situations SCHEDULED → LIVE → (LOCKED?) → ENDED → ARCHIVED 10 • LOCKED: New entries are blocked; ENDED triggers closing and reporting. The invention relates to data structures from the administrator's perspective within the system; admin_user • user_id, email, role={ADMIN,MODERATOR}, mfa_enabled, last_login_at, 15 rba_flags(json) kyc_case • case_id, user_id, provider_status, risk_score, admin_decision, notes, updated_at room 20 • room_id, guide_id, status, access_policy={open,pass,paid}, pass_hash?, start_at, end_at provider_status • provider_id, latency_p95, error_rate, health, switchover_ready audit_log 25 • In the form of event_id, actor_id, action, ip, ua, ts, details(json), sig It is structured. The invention establishes Measurable Acceptance Criteria (KPIs) for management within the system; • Access security: MFA coverage ≥ 95%, automatic detection of 30 suspicious entries. Prevention ≥ 99%. • KYC cycle time: p95 ≤ 7 min, false rejection ≤ 2%. • Room intervention time: “Terminate / Lock” command → effect ≤ 2 seconds. 19 • Provider switching: Planned transition ≤ 30 sec, rollback on failure ≤ 10 sec. • Reporting integrity: Data consistency ≥ 99% (order→access, rooms, participants) It is structured as follows: metrics. Security and Compliance Notes from the Administrator's Perspective in the System; 5 • TLS / SRTP: All data / media is encrypted; management endpoints additionally require an IP allowlist. (optional). • Rate Limiting & CAPTCHA: Speed ​​limiting on input and critical APIs; suspicious CAPTCHA in traffic. • Storage & Deletion: GDPR compliant storage periods; KYC raw image 10 It is not stored in the system; only the provider reference is kept. • Signature and Timestamp: Audit records are verified with a cryptographic signature. It is structured in a way that is subject to control. Alternative Implementations from the Manager's Perspective in the System; 15 • SSO / IdP Integration: Admin login with corporate IdP (SAML / OIDC) The following needs to be done; additionally, system MFA. • Delegation of Authority Model: "Temporary admin" (time-boxed) role for field activity; duration Automatic authorization termination upon completion. • Event-Triggered Automation: When the complaint threshold is exceeded, the room is automatically locked and 20 The task is configured to be assigned to the admin. The meeting includes city tours, museums, cultural events, university campuses, and private visits. It is a system developed for organizations, including Web / PWA / native, room creation, and publishing. Guide application including start / end, route note, password / QR management and QR 25 Tourist browser, quick sign-up (OTP), room entry, listening interface, survey. The invention includes the application of OTP as an access and identity layer in the system. service (email / SMS), magic link (optional) and device key and The directory also includes KYC integration (OCR, liveness, facial recognition). Room / Orchestration Service: SCHEDULED → LIVE → ENDED → 30 Room lifecycle structured as ARCHIVED: open | pass | paid access policy and password generation / renewal (timed hash) configured as follows: A signed / timed QR / URI is included. The invention is for the RTC (Audio) Layer of the system. Jitsi / Agora or an equivalent provider of abstraction, RTT / jitter / loss measurement, and dynamics. Packet time (20 / 40 / 60 ms), bitrate adjustment and adaptation including FEC / PLC. module and (Wi-Fi↔4G / 5G) tolerance ≤3 sec targeted reconnection and network switching It is available. WooCommerce / similar order→access list automation. Payment and / or ticketing and participant count processed via webhook (≤2 sec), listening 5 Analytics that provide time, p95 latency, dropout rate, NPS; CSV / Excel export. and reporting are included in the system. In addition, invention management and KYC queue for security, room lock / termination, provider switching. (automatic / manual), policy management (MFA, rate limit), audit log (signed / time-based) (stamped) and data minimization for KVKK / GDPR (KYC raw images at provider 10 The system only contains the reference ID. 20 30

Claims

21 REQUESTS 1- The meeting includes city tours, museums, cultural events, university campuses, and private visits. It is a hardware-free audio tourism guide system developed for organizations, Its feature is that a guide can use the guide device (1) guide operation module 5 during a tourist visit. (1a) initiating and broadcasting the visit with the broadcast module (2) and QR code and the server and broadcast router in the connection created with the link builder (3) (4) QR created by visitors' devices (5) for the broadcast opened for the visit By scanning the code (3), you can enter the broadcast room and receive audio and visual information. ensuring access is ensured, here are the steps the guide will follow, 10 - The guide opens the application (web / PWA / native) and the system selects the device, language, and time. Access, which detected the slice, includes the options “Log in”, “Quick registration”, and “Become a Guide”. The Start Screen shown indicates that the guide has selected "Become a Guide" and the system Role Selection initiates the application flow with the `role=requested=GUIDE` parameter. The KVKK / GDPR texts and the explicit consent form (checkbox) are presented as mandatory, and 15 KVKK (Personal Data Protection Law) Information procedures, which prevent progress without being marked, are included. Application Introduction and "Become a Guide" phase, - Full name, email, phone number, date of birth, country / city, preferably IBAN (for receiving payments) Personal Registration Form (if desired) containing mandatory fields, instant format on the client side Verification (email regex, phone E.164, IBAN mod-97) has been completed, and if there are any errors, 20 Field Validation, which is indicated by a red warning on the form, will be verified by the system via email or SMS. It generates a one-time authentication code (OTP), with TTL=10 min and rate limit=3. OTP sending with backoff=exponential, where the directory enters the incoming 6-digit code and The system verified on the server side (4), canceled the code after three failed attempts and The re-creation stream offers OTP validation; if validation is successful, 25 in the system as user.status=PENDING_KYC, user.role=CANDIDATE_GUIDE Account Creation, which includes the Account Pre-Creation processes where the registration is created, and Communication Verification stage, - Image of ID (front / back) or passport, image / PDF of guide document and guide Selfie liveness shots with guided animations, locally 30 Document Upload Screen, size / resolution checked, light / rotation. The system detects and assists with framing; if necessary, the guide is shown a "clearer shot" warning. Client-side preprocessing involves uploading documents via TLS, storing them in temporary storage, and 22 Secure Server Redirection to KYC Provider instead of Permanent Storage The transfer is when the system sends the application with the submission_id to the KYC API and the KYC The provider performs OCR + face matching + document validity checks and the result... Approved | Review | Rejected as received via webhook or polling. Once the KYC Provider Integration is APPROVED, the next step is Role 5. When the assignment and secure session are completed, REVIEW is being reviewed again. those who notify the guide that it is "under review" and place it in the queue in the moderator panel and REJECTED: In case of rejection, provide the reason for rejection and Update Document / Try Again. The Status Management provided via the link and previously approved when confirmed. The system sets user.role=GUIDE and kyc_status=APPROVED; one-click access to the "guide panel" is possible. Role Assignment and Secure, Signed Token Generated for Transition (JWT / opaque, exp≤1 hour) The KYC (Knowledge and Guidance) Verification stage, which includes session procedures, - IBAN format check and verification via microtransaction, and only if it fails. Bank / Payment where IBAN Verification process is completed, allowing for free room opening. stage, 15 - Progress as follows: "Profile complete, KYC approved, microphone test completed" The Onboarding Checklist, which includes a checklist and links for missing information, is included in the guide. Push / email preferences are requested (tour start reminder, etc.) Notification Permissions and "New Room → Title / Date / Password → Generate QR → Start Broadcast" mini-tour guide. as shown and through these processes the guide opens a room in the system and narrates for visitors and 20 being able to provide information and earn money in return for this service Completing Onboarding and First Session, which includes the Initial Room Guide procedures provided. includes stages, The tourist is directed to the room check-in page by scanning the QR code (3) provided by the guide, low latency allows participation in voice-only sessions and the system is 25 for the tourist timed / passwordless variant and automatic recovery mechanisms in case of network outage including and implemented for tourists; - The guide is generated by the system and is available at the tour starting point or online. shared and containing at least room_id, nonce, exp (expiration date) QR Display with an access URI signed with parameters, tourist device 30 Scanning and scanning by reading the QR code with its camera or the QR Scanner module in the application. 23 The app verifies the QR content (signature / time check) and directs the user to the Room. It redirects to the login screen and throws an exception if the signature is invalid or the expiration date has passed. The QR Room Access phase includes the redirection processes that trigger the flow, - Access Type Control, where the system reads the room settings, displays the Password field on the screen. room 5, as it appeared and the tourist took it from what the guide said or the instructions on the screen. Room Authorization verified by entering password and room-based timed hash. stage, - The client connects to the room only as a listener and requests notification permission if necessary. Media Preparation, where questions are asked and microphone permission is not required for the listener, the server (4) sends only the audio stream parameters (codec=Opus, 10 to the tourist client. Bitrate adaptive, frame=20 / 40 / 60 ms) distributed Low Latency Session, session audio streaming starts automatically when turned on or with the large Play button when it starts and the volume slider, remaining time and emoji / reactions are displayed on the screen. Displays jitter buffer / adaptive bitrate in case of playback and network fluctuations. 15 that maintains acoustic continuity and provides automatic reconnection in case of breakage. Room Participation and Audio Streaming for In-Session Summary Procedures stage, - When the guide ends the broadcast, the tourist screen will display a 1-5 star rating and a short text field. The survey area displayed allows tourists to indicate their language preference or city interest for future tours. Session End and Back 20 includes Registration / Personalization processes that can save the area. It includes a notification phase and The administrator user must log in to the panel with strong authentication, KYC. monitoring applications and room / access processes, provider switching and managing security policies, reporting and data storage functions This includes the execution of the audit log, in which all critical actions are recorded, and 25 Automatic rate reduction (rate limit, logout, rollback) in case of failure / doubt. As implemented in the Manager's workflow: - Access, E-, where the administrator reaches the administration URL (web / PWA / native admin mode). Email / username + password login and incremental verification on the server (4) side Initiated Credential, IP, device fingerprint, geography, time zone, failed attempt 30 The RBA (Risk Score), which generates a risk score using signals such as the number of cases, indicates that the risk score threshold is exceeded. MFA (TOTP, push, FIDO2) is mandatory and may be required even in low-risk situations. MFA, short-lived access token (JWT / opaque, exp≤1) upon successful verification. 24 (hours) + refresh token generated and session httpOnly and SameSite Session Production and Server, secured by their flags role=ADMIN / MODERATOR and loads the fine-grained permission set (RBAC / ABAC) The Administrator Login and Session Security phase, which includes Authorization Scheme operations, - Active rooms, participant numbers, delay / missed members summaries, KYC queue, incident / complaint 5 Status Cards with counter panels and threshold exceedances (p95 delay, error rate, Alerts with warning cards and email / push panels (failed KYC boosting) The Main Panel (Dashboard) and System Status phase, which includes the operations, - Applications are on the card list and each card has a KYC provider result. (APPROVED / REVIEW / REJECTED), risk score, Queue 10 including document previews. The view is that the Administrator zooms in on the ID / guideline document and uses OCR to verify it. Card Review and Approve, where you can view your score and liveness report: user.role=GUIDE, kyc_status=APPROVED, Reject: Reason code is selected; Automatic notification to the user and Request Additional Documents: Invitation to upload documents to the user. The decision, which presents the options, and the decision, actor, and timestamp are written to the audit log on 15. The KYC Application Management phase includes audit procedures. - Active / passive status; number of complaints, simultaneous listeners, access type (password / fee) information. The Room List includes a system that prevents new entries and protects existing listeners. Lock, emergency shutdown; notify listeners; secure shutdown if recording is available. Terminate the room and generate a new password with a time limit in case of suspected leakage. 20 Instant Actions that enable Password Reset interventions and inappropriate actions. Content / Name; provides minimal metadata retention for evidentiary purposes after one-click termination. The Room / Content Moderation phase, which includes Breach Flow procedures, - Latency / error metrics from providers like Jitsi / Agora, threshold values ​​per room. Provider Status, which contains this information, indicates that the system is "on standby" 25 in case the threshold is exceeded. Automatic Switching, which the second provider implements the drain & switch plan for, The administrator briefly selects "Change Provider" as the microphone / output verification. The connection health test works and the manual automatically rolls back if the test fails. Audit processes where switching and the switching event are logged in detail. The Provider Management (RTC and Edge Infrastructure) phase, which includes 30 - Commission rate, currency, refund / coupon rules, historical exchange transactions. Commission & Currency provided and access list when order is completed Updated and offering bulk refund / cancellation options in the admin panel: Tickets → Access The Finance / Fee Policies phase enables automation processes. - Password / MFA requirement, session duration, password frequency, data retention Policy Screen providing timelines, “Download / Delete My Data” request queue and SLA tracking 5 Data Requests (DSAR) and login, KYC decision, room closure, switching, Logging / Audit where all critical actions, such as policy changes, are recorded with a signature. Security & GDPR / KVKK Management phase, which includes the processes and - Includes information on participants per room, listening time, dropout rate, and P95 latency. The Operation Dashboard contains 10 items including NPS / survey results, and information on the distribution of violations / complaints. Satisfaction and CSV / Excel export including scheduled report emails. It includes the Reporting & Analytics phase that enables these processes. 2- It is a system according to claim 1, and its feature is that it performs with the guide's device (1). In the guidance process steps, it is possible to recover from errors and exception flows; • “Resend code” backup channel (email↔SMS pass), cooldown=30 sec. 15 OTP could not be obtained, therefore... • The guide should indicate "insufficient light / out of frame," showing the image a maximum of two times. Liveness Failed, then redirected to manual review, • If the OCR confidence score does not exceed the minimum threshold, the user is provided with sample images / hints. Document Could Not Be Read, 20 (allowing for reloading) • The reason for the transaction error appears to be (date mismatch, document type not supported). etc.) and re-upload link and options to submit questions to the moderator. KYC verification rejected. • When the same ID number appears in different accounts, moderator approval is required. Multiple Applications / Conflicts, 25, which enables the "merge with existing account" flow. • Resumable transfer in uploads and after 3 failed attempts Network interruption operations, which involve dropping to simple loading mode. It includes. 3- It is a system according to claim 1, and its feature is that it performs with the guide's device (1). For security, privacy, and compliance notes in the guidance process, see 30 • All data is transmitted over TLS 1.2+, and media and file uploads are timestamped. Transmission Security, which provides limited-time access with signed URLs, 26 • KYC images are not permanently stored in the system; they are only used for provider reference. Data Minimization where the ID is stored, • GUIDE_PENDING during application, GUIDE role after approval; sensitive Access control that provides rate limit and CSRF at endpoints, • Application, document upload, decision (approval / reject) and role change events and 5 Logging / Auditing, recorded in a signed log with information about who, when, and where. • Containing explicit consent texts, data processing inventory, and retention period information. It includes KVKK / GDPR modules. 4- It is a system according to Claim 1, and its feature is that it is accessed by the visitor device (5). 10 in terms of security, privacy and compliance for tourists • On the server (4) side, the QR content includes a digital signature and expiry (exp). Signed QR / URI prevents login without verification. • Room passwords are time-limited and require periodic renewal to prevent easy sharing. with the option to verify on the server with salted hash (4) Password Management, provided by 15 • Tourist personal data is collected to a minimum extent and the media is notified during the theft. Data minimization that enables transmission over SRTP / TLS, • Timing of critical events such as QR verification, OTP, password verification, and payments. This involves performing logging operations, where the data is written to the stamped audit log. 5- It is a system according to Request 1, and its feature is; 20 in the system entered with the visitor device (5). In terms of exceptional flows and recovery for tourists, • The screen displays a "Your connection is invalid / expired" warning and requests a renewal. Invalid / Old QR, containing a button and requesting a new QR from the guide, • “Reconnecting (3…2…1…)” progress indicator; target ≤ 3 seconds; Network Outage, 25, which provides a "Try Again" button if it fails. • Valid until the end of the tour, ephemeral identity, permanent account prior to the survey. It includes Guest Attendance modules that contain conversion offer processes. 6- It is a system according to Request 1, and its feature is that the administrator (admin) controls the user from their own device. login, authentication, and end-to-end guide-tourist audio room platform. under his management; 30 - System policies / settings, KYC results, room moderation, provider switching and as the user with reporting privileges, the Administrator, 27 - Limited privileges, KYC and content / room moderation, and system settings. Non-interfering Moderator, - KYC Provider for third-party services that handle identity / verification processes, - Jitsi / Agora infrastructure RTC Provider that provides live audio transmission, - Room, a live audio-only session area opened by the guide, 5 - Risk-based access and multi-factor authentication (RBA / MFA), - It should include Audit Log modules with signed / time-stamped audit records. 7- It is a system according to Request 1, and its feature is that the administrator (admin) can access it from their own device. In terms of exception flows and error mitigation for the administrator in the system, the following are included at the login: The processes are carried out. 10 • MFA is mandatory in attempts exceeding the RBA threshold; calculation after 5 failed attempts. Temporary lock, IP speed limiting, Access Restriction (Excessive Risk), • Cancel all sessions + reset password in case of simultaneous session anomaly Reported by: Suspected Token Theft, • Items in the queue are sent to manual review and the user is shown as "under review" for 15 days. KYC Provider Fee, which provides information, • Automatically rollbacks and provides the user with a link if the connection health test fails. Switching Failure, sessions were transferred to the old provider with minimum interruption. • If the order status remains pending, the admin can force synchronize from the gateway using "force synchronization". The situation involves Payment Webhook Delay transactions that are processed by audit. 20 8- City tours, museums, cultural trips according to any of the above requests A system developed for events, university campuses, and private organizations. Its features include: Web / PWA / native, room creation, start / end broadcast, route notes. Guide app with password / QR management and QR scanner, quick registration (OTP), room The system includes a tourist application with participation, a listening interface, and surveys; access is 25. and OTP service (email / SMS) as an identity layer, magic link (optional) and KYC integration for device key and contacts (OCR, liveness, (Face matching) is found, in terms of Room / Orchestration Service SCHEDULED → The room lifecycle is structured as LIVE → ENDED → ARCHIVED. Access policy configured as open | pass | paid and password 30 Generation / renewal (timed hash), presence of signed / timed QR / URI, and system RTC. For the (Audio) Layer, use Jitsi / Agora or an equivalent provider abstraction. RTT / jitter / loss measurement, dynamic packet duration (20 / 40 / 60 ms), bitrate adjustment, and 28 Adaptation module including FEC / PLC and (Wi-Fi↔4G / 5G) tolerance target ≤3 sec. Reconnecting and network accessing WooCommerce / like order access. Payment and / or ticketing and participant list automation (via webhook ≤2 sec). Number of listens, listening time, p95 latency, dropout rate, NPS; CSV / Excel export. The inclusion of analytics and reporting capabilities in the system, and management and 5 in the system KYC queue for security, room lock / termination, provider switching. (automatic / manual), policy management (MFA, rate limit), audit log (signed / time-based) (stamped) and includes data minimization in accordance with KVKK / GDPR. 15 25

Images