Digital Pass Binding With Device Keys to Prevent Unauthorized Use

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Digital passes can be easily stolen or shared with unauthorized users, potentially leading to unauthorized access and digital fraud due to lack of proper authentication and authorization.

Innovation Solution

A mechanism that binds a digital pass to a device via synchronized keys, using a public key on the user's device along with its private key, ensuring the pass can only be used on devices associated with the user's account.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If digital passes are stored on digital devices for convenience and accessibility, then ease of operation is improved, but security and authorization control deteriorate

Engineering Contradiction:

Improveconvenience of digital pass storage and accessVSAvoidsecurity against unauthorized use

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The digital pass system is segmented into multiple independent components: a device identifier component stored on the user's device, a cryptographic signature component generated by the server, and a validation component on the presenting device. This segmentation allows the pass to be conveniently stored on personal devices while maintaining security through distributed verification, resolving the contradiction between ease of operation and reliability.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The system performs preliminary binding of the digital pass to a specific device identifier before the pass is used. The server cryptographically signs the pass with the device identifier embedded, and this binding is validated before the pass can be redeemed. This preliminary action ensures that only the authorized device can use the pass, maintaining security while allowing convenient access on the bound device.

Inventive Principle:

Principle #10Preliminary action

2Adaptability or versatility

If digital passes can be transferred between devices for flexibility, then adaptability is improved, but control over authorized usage deteriorates

Engineering Contradiction:

Improveflexibility of pass transferVSAvoidunauthorized access and digital fraud

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The system implements feedback through real-time validation of the device identifier against the cryptographic signature on each pass presentation. When a pass is presented, the server verifies the device identifier embedded in the pass matches the one it originally signed. This feedback mechanism allows flexible pass usage on bound devices while preventing unauthorized transfers, as any transfer to an unbound device would fail validation.

Inventive Principle:

Principle #23Feedback

3Ease of operation

If traditional authentication methods are used for digital passes, then ease of operation is maintained, but susceptibility to theft and sharing increases

Engineering Contradiction:

Improvesimplicity of pass usageVSAvoidtheft and unauthorized sharing

Core Design Contradiction:

Ease of operationVSObject-generated harmful factors

Solution Approach 1:

The system replaces traditional mechanical authentication methods (physical cards, codes, or simple digital tokens) with a cryptographic authentication mechanism. Instead of relying on the physical security of a card or the complexity of a code, the system uses cryptographic signatures tied to device identifiers. This substitution maintains ease of operation through contactless digital presentation while eliminating theft and sharing vulnerabilities through mathematical security.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS12519778B2Securing a digital pass to a device-associated user account

Publication Date: 2026.01.06 APPLE INC

AI summary

The subject system may be implemented by a processor circuit configured to transmit a request for a digital pass to a pass issuer server, receive issuer information associated with the pass issuer server, obtain a first key associated with the issuer information, and generate security data based at least in part on the first key, transmit, to the pass issuer server, the security data. The processor circuit may also be configured to receive the digital pass from the pass issuer server. The digital pass includes the security data.