Systems and methods for scalable-factor authentication

Patent metadata

Field	Value
Publication number	US-10187390-B2
Application number	US-201715811078-A
Country	US
Kind code	B2
Filing date	Nov 13, 2017
Priority date	Dec 4, 2015
Publication date	Jan 22, 2019
Grant date	Jan 22, 2019

Abstract

Authentication systems and methods can selectively authenticate a request to access a resource data store storing access rights associated with a user device. The systems and methods can scalably execute challenges workflows as part of the authentication process. For example, a request to access one or more access rights stored in the data store can be received from the user device. The user device can be authenticated using challenge workflows selected based on a device identifier of the user device. The selected challenge workflows can be executed to determine whether or not to grant access to the access rights stored in the resource data store.

First claim

What is claimed is:

1. A system for authenticating requests for electronic tickets to events using challenge workflows, the system comprising:
an event data store that stores event data, the event data corresponding to one or more events, each event of the one or more events being associated with one or more electronic tickets to at least one event of the one or more events; and
an authentication system, including one or more processing devices, that:
receives a request to access an electronic ticket to an event, the request being received from a user device, and the event being associated with a venue;
identifies a first device identification (ID) code associated with the user device, the first device ID code characterizing an attribute of the user device;
generates a communication trigger, the communication trigger causing a communication to be transmitted to the user device, and the communication trigger identifying a communication channel from amongst a plurality of communication channels for transmitting the communication;
generates a selectable element associated with the user device, the selectable element being configured to extract a device identifier from a device on which the selectable element was selected;
transmits the communication over the identified communication channel, the communication including the selectable element;
receives a second device ID code, the second device ID code corresponding to a device identifier of a device on which the selectable element was selected;
compares the first device ID code and the second device ID code; and
determines whether the user device is authorized to access the electronic ticket based on the comparison of the first device ID code and the second device ID code, such that matching of the first device ID and the second device ID enables the user device to gain access to the electronic ticket to the event.

2. The system of claim 1 , wherein the first device ID code being the same as the second device ID code indicates that the selectable element was selected at the user device, and wherein when the selectable element is selected at the user device, the user device is determined to be authorized to access the electronic ticket to the event.

3. The system of claim 1 , wherein when the first device ID code does not match the second device ID code, the user device is determined to be unauthorized to access the electronic ticket to the event.

4. The system of claim 1 , wherein when the user device is determined to be authorized to access the electronic ticket, the user device is granted access to another electronic ticket that is already assigned to the user device.

5. The system of claim 1 , wherein when the user device is determined to be authorized to access the electronic ticket, further comprising:
transmitting interface data to the user device, wherein the interface data causes an interface to be displayed at the user device, and wherein the interface enables a user to transfer assignment of the electronic ticket to another user device.

6. The system of claim 1 , wherein the request includes the first device ID code.

7. The system of claim 1 , wherein the communication channel includes an e-mail communication channel or a short message service (SMS) communication channel.

8. A computer-implemented method, comprising:
receiving a request to access an electronic ticket to an event, the request being received from a user device, and the event being associated with a venue;
identifying a first device identification (ID) code associated with the user device, the first device ID code characterizing an attribute of the user device;
generating a communication trigger, the communication trigger causing a communication to be transmitted to the user device, and the communication trigger identifying a communication channel from amongst a plurality of communication channels for transmitting the communication;
generating a selectable element associated with the user device, the selectable element being configured to extract a device identifier from a device on which the selectable element was selected;
transmitting the communication over the identified communication channel, the communication including the selectable element;
receiving a second device ID code, the second device ID code corresponding to a device identifier of a device on which the selectable element was selected;
comparing the first device ID code and the second device ID code; and
determining whether the user device is authorized to access the electronic ticket based on the comparison of the first device ID code and the second device ID code, such that matching of the first device ID and the second device ID enables the user device to gain access to the electronic ticket to the event.

9. The computer-implemented method of claim 8 , wherein the first device ID code being the same as the second device ID code indicates that the selectable element was selected at the user device, and wherein when the selectable element is selected at the user device, the user device is determined to be authorized to access the electronic ticket to the event.

10. The computer-implemented method of claim 8 , wherein when the first device ID code does not match the second device ID code, the user device is determined to be unauthorized to access the electronic ticket to the event.

11. The computer-implemented method of claim 8 , wherein when the user device is determined to be authorized to access the electronic ticket, the user device is granted access to another electronic ticket that is already assigned to the user device.

12. The computer-implemented method of claim 8 , wherein when the user device is determined to be authorized to access the electronic ticket, further comprising:
transmitting interface data to the user device, wherein the interface data causes an interface to be displayed at the user device, and wherein the interface enables a user to transfer assignment of the electronic ticket to another user device.

13. The computer-implemented method of claim 8 , wherein the request includes the first device ID code.

14. The computer-implemented method of claim 8 , wherein the communication channel includes an e-mail communication channel or a short message service (SMS) communication channel.

15. A computer-program product tangibly embodied in a non-transitory machine-readable storage medium, including instructions configured to cause a data processing apparatus to perform operations including:
receiving a request to access an electronic ticket to an event, the request being received from a user device, and the event being associated with a venue;
identifying a first device identification (ID) code associated with the user device, the first device ID code characterizing an attribute of the user device;
generating a communication trigger, the communication trigger causing a communication to be transmitted to the user device, and the communication trigger identifying a communication channel from amongst a plurality of communication channels for transmitting the communication;
generating a selectable element associated with the user device, the selectable element being configured to extract a device identifier from a device on which the selectable element was selected;
transmitting the communication over the identified communication channel, the communication including the selectable element;
receiving a second device ID code, the second device ID code corresponding to a device identifier of a device on which the selectable element was selected;
comparing the first device ID code and the second de

Assignees

• Live Nation Entertainment Inc

Inventors

• Cernoch Dan
• Pondicherry Ajay
• Refsland David
• Ives-Halperin Kenneth

Classifications

• H04L63/0876

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04L63/205

  involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved (negotiation of communication capabilities H04L69/24) · CPC title

• G06F21/44

  Program or device authentication · CPC title

• H04L63/105 Primary

  Multiple levels of security · CPC title

• H04L2463/082

  applying multi-factor authentication · CPC title