Systems and methods for scalable-factor authentication
Authentication systems and methods can selectively authenticate a request to access a resource data store storing access rights associated with a user device. The systems and methods can scalably execute challenges workflows as part of the authentication process. For example, a request to access one or more access rights stored in the data store can be received from the user device. The user device can be authenticated using challenge workflows selected based on a device identifier of the user device. The selected challenge workflows can be executed to determine whether or not to grant access to the access rights stored in the resource data store.
1. A system for authenticating requests for electronic tickets to events using challenge workflows, the system comprising:
an event data store that stores event data, the event data corresponding to one or more events, each event of the one or more events being associated with one or more electronic tickets to at least one event of the one or more events; and
an authentication system, including one or more processing devices, that:
receives a request to access an electronic ticket to an event, the request being received from a user device, and the event being associated with a venue;
identifies a first device identification (ID) code associated with the user device, the first device ID code characterizing an attribute of the user device;
generates a communication trigger, the communication trigger causing a communication to be transmitted to the user device, and the communication trigger identifying a communication channel from amongst a plurality of communication channels for transmitting the communication;
generates a selectable element associated with the user device, the selectable element being configured to extract a device identifier from a device on which the selectable element was selected;
transmits the communication over the identified communication channel, the communication including the selectable element;
receives a second device ID code, the second device ID code corresponding to a device identifier of a device on which the selectable element was selected;
compares the first device ID code and the second device ID code; and
determines whether the user device is authorized to access the electronic ticket based on the comparison of the first device ID code and the second device ID code, such that matching of the first device ID and the second device ID enables the user device to gain access to the electronic ticket to the event.
2. The system of claim 1 , wherein the first device ID code being the same as the second device ID code indicates that the selectable element was selected at the user device, and wherein when the selectable element is selected at the user device, the user device is determined to be authorized to access the electronic ticket to the event.
3. The system of claim 1 , wherein when the first device ID code does not match the second device ID code, the user device is determined to be unauthorized to access the electronic ticket to the event.
4. The system of claim 1 , wherein when the user device is determined to be authorized to access the electronic ticket, the user device is granted access to another electronic ticket that is already assigned to the user device.
5. The system of claim 1 , wherein when the user device is determined to be authorized to access the electronic ticket, further comprising:
transmitting interface data to the user device, wherein the interface data causes an interface to be displayed at the user device, and wherein the interface enables a user to transfer assignment of the electronic ticket to another user device.
6. The system of claim 1 , wherein the request includes the first device ID code.
7. The system of claim 1 , wherein the communication channel includes an e-mail communication channel or a short message service (SMS) communication channel.
8. A computer-implemented method, comprising:
receiving a request to access an electronic ticket to an event, the request being received from a user device, and the event being associated with a venue;
identifying a first device identification (ID) code associated with the user device, the first device ID code characterizing an attribute of the user device;
generating a communication trigger, the communication trigger causing a communication to be transmitted to the user device, and the communication trigger identifying a communication channel from amongst a plurality of communication channels for transmitting the communication;
generating a selectable element associated with the user device, the selectable element being configured to extract a device identifier from a device on which the selectable element was selected;
transmitting the communication over the identified communication channel, the communication including the selectable element;
receiving a second device ID code, the second device ID code corresponding to a device identifier of a device on which the selectable element was selected;
comparing the first device ID code and the second device ID code; and
determining whether the user device is authorized to access the electronic ticket based on the comparison of the first device ID code and the second device ID code, such that matching of the first device ID and the second device ID enables the user device to gain access to the electronic ticket to the event.
9. The computer-implemented method of claim 8 , wherein the first device ID code being the same as the second device ID code indicates that the selectable element was selected at the user device, and wherein when the selectable element is selected at the user device, the user device is determined to be authorized to access the electronic ticket to the event.
10. The computer-implemented method of claim 8 , wherein when the first device ID code does not match the second device ID code, the user device is determined to be unauthorized to access the electronic ticket to the event.
11. The computer-implemented method of claim 8 , wherein when the user device is determined to be authorized to access the electronic ticket, the user device is granted access to another electronic ticket that is already assigned to the user device.
12. The computer-implemented method of claim 8 , wherein when the user device is determined to be authorized to access the electronic ticket, further comprising:
transmitting interface data to the user device, wherein the interface data causes an interface to be displayed at the user device, and wherein the interface enables a user to transfer assignment of the electronic ticket to another user device.
13. The computer-implemented method of claim 8 , wherein the request includes the first device ID code.
14. The computer-implemented method of claim 8 , wherein the communication channel includes an e-mail communication channel or a short message service (SMS) communication channel.
15. A computer-program product tangibly embodied in a non-transitory machine-readable storage medium, including instructions configured to cause a data processing apparatus to perform operations including:
receiving a request to access an electronic ticket to an event, the request being received from a user device, and the event being associated with a venue;
identifying a first device identification (ID) code associated with the user device, the first device ID code characterizing an attribute of the user device;
generating a communication trigger, the communication trigger causing a communication to be transmitted to the user device, and the communication trigger identifying a communication channel from amongst a plurality of communication channels for transmitting the communication;
generating a selectable element associated with the user device, the selectable element being configured to extract a device identifier from a device on which the selectable element was selected;
transmitting the communication over the identified communication channel, the communication including the selectable element;
receiving a second device ID code, the second device ID code corresponding to a device identifier of a device on which the selectable element was selected;
comparing the first device ID code and the second device ID code; and
determining whether the user device is authorized to access the electronic ticket based on the comparison of the first device ID code and the second device ID code, such that matching of the first device ID and the second device ID enables the user device to gain access to the electronic ticket to the event.
16. The computer-program product of claim 15 , wherein the first device ID code being the same as the second device ID code indicates that the selectable element was selected at the user device, and wherein when the selectable element is selected at the user device, the user device is determined to be authorized to access the electronic ticket to the event.
17. The computer-program product of claim 15 , wherein when the first device ID code does not match the second device ID code, the user device is determined to be unauthorized to access the electronic ticket to the event.
18. The computer-program product of claim 15 , wherein when the user device is determined to be authorized to access the electronic ticket, the user device is granted access to another electronic ticket that is already assigned to the user device.
19. The computer-program product of claim 15 , wherein when the user device is determined to be authorized to access the electronic ticket, further comprising:
transmitting interface data to the user device, wherein the interface data causes an interface to be displayed at the user device, and wherein the interface enables a user to transfer assignment of the electronic ticket to another user device.