Authenticated checkin via passive NFC
The present disclosure involves a method of verifying user check-ins to a venue. The method includes initializing a digital check-in chain for a venue. The method includes expanding, electronically by a processor, the check-in chain with a plurality of check-in entries that each correspond to a visit to the venue by a respective user. Each check-in entry on the check-in chain is generated in response to one or more preceding check-in entries on the check-in chain. The method includes detecting fraudulent check-in entries in response to a split in the check-in chain. The method includes removing the fraudulent check-in entries from the check-in chain.
1. A method, comprising:
receiving a first check-in request corresponding to a first user, the first check-in request comprising a first check-in entry corresponding to the first user and a first check-in chain received by the first user from a check-in device at a venue, the first check-in chain comprising one or more check-in entries associated with one or more other previous users;
verifying, electronically by a processor, the first check-in request by utilizing a public key associated with an account of the first user to decrypt the first check-in entry;
in response to the verifying the first check-in request, appending the first check-in entry to the first check-in chain; and
sending the first check-in chain with the appended first check-in entry to the check-in device.
2. The method of claim 1 , further comprising:
receiving a second check-in request from a second user after receiving the first check-in request, the second check-in request comprising a second check-in entry corresponding to the second user and a second check-in chain, wherein the second check-in chain comprises the one or more check-in entries associated with the one or more other previous users, but not the first check-in entry.
3. The method of claim 2 , further comprising:
in response to determining that the second check-in chain does not include the first check-in entry, determining that a fraudulent check-in request has taken place.
4. The method of claim 3 , further comprising:
monitoring check-in chains included in additional check-in requests associated with the check-in device; and
in response to receiving a third check-in request that corresponds to the first check-in chain, determining that the second check-in request is the fraudulent check-in request.
5. The method of claim 4 , wherein monitoring the check-in chains comprises monitoring at least one of a volume of check-ins, a rate of check-ins, or a variety of unique user identifications.
6. The method of claim 4 , further comprising in response to the determining that the second check-in request is the fraudulent check-in request, removing one or more check-in entries from the second check-in chain.
7. The method of claim 1 , wherein the first check-in entry includes a cryptographic signature of the first user.
8. The method of claim 7 , wherein the cryptographic signature is generated as a function of every other existing cryptographic signature in the first check-in chain.
9. The method of claim 1 , wherein:
the first check-in entry is signed with a private key associated with the first user.
10. A tangible, non-transitory computer-readable medium including instructions that, when executed by a processor of a server, cause the server to perform a method comprising:
receiving a first check-in request corresponding to a first user, the first check-in request comprising a first check-in entry corresponding to the first user and a first check-in chain received by the first user from a check-in device at a venue, the first check-in chain comprising one or more check-in entries associated with one or more other previous users;
verifying, electronically by a processor, the first check-in request by utilizing a public key associated with an account of the first user to decrypt the first check-in entry;
in response to the verifying the first check-in request, appending the first check-in entry to the first check-in chain; and
sending the first check-in chain with the appended first check-in entry to the check-in device.
11. The computer-readable medium of claim 10 , wherein the method further comprises:
receiving a second check-in request from a second user after receiving the first check-in request, the second check-in request comprising a second check-in entry corresponding to the second user and a second check-in chain, wherein the second check-in chain comprises the one or more check-in entries associated with the one or more other previous users, but not the first check-in entry.
12. The computer-readable medium of claim 11 , further comprising:
in response to determining that the second check-in chain does not include the first check-in entry, determining that a fraudulent check-in request has taken place.
13. The computer-readable medium of claim 12 , wherein the method further comprises:
monitoring check-in chains included in additional check-in requests associated with the check-in device; and
in response to receiving a third check-in request that corresponds to the first check-in chain, determining that the second check-in request is the fraudulent check-in request;
wherein monitoring the check-in chains comprises monitoring at least one of a volume of check-ins, a rate of check-ins, or a variety of unique user identifications.
14. The computer-readable medium of claim 13 , wherein the method further comprises in response to the determining that the second check-in request is the fraudulent check-in request, removing one or more check-in entries from the second check-in chain.
15. The computer-readable medium of claim 10 , wherein the first check-in entry includes a cryptographic signature of the first user.
16. The computer-readable medium of claim 15 , wherein the cryptographic signature is generated as a function of every other existing cryptographic signature in the first check-in chain.
17. The computer-readable medium of claim 10 , wherein:
the first check-in entry is signed with a private key associated with the first user.
18. A method comprising:
verifying a first check-in request corresponding to a first user checking in at a venue, the first check-in request comprising a first check-in entry that is a function of a check-in seed associated with the venue;
in response to the verifying the first check-in request, appending the first check-in entry to a first check-in chain to form a first updated first check-in chain;
transmitting the first check-in chain to a check-in device of the venue;
verifying a second check-in request corresponding to a second user checking in at the venue, the second check-in request comprising a second check-in entry that is a function of the first check-in chain;
in response to verifying the second check-in request, appending the second check-in entry to the first check-in chain to form a second updated first check-in chain; and
sending the second updated first check-in chain to the check-in device.
19. The method of claim 18 , further comprising:
receiving a third check-in request corresponding to a third user checking in at the venue, the third check-in request comprising a third check-in entry and a third updated first check-in chain;
receiving a fourth check-in request corresponding to a fourth user checking in at the venue, the fourth check-in request comprising a fourth check-in entry and a fourth updated first check-in chain; and
detecting a branching between the third updated first check-in chain and the fourth updated first check-in chain.
20. The method of claim 19 , further comprising in response to the detecting the branching, determining that the third-check-in chain or the fourth check-in chain is fraudulent.