System and method for using unique device identifiers to enhance security
A method for detection and use of device identifiers to enhance the security of data transfers between electronic devices. A first electronic device can transmit access data to a second electronic device. The access data can be associated with a first access code that can be generated based at least in part on data representing a device identifier of the first electronic device. A device identifier can uniquely identify the first electronic device from a plurality of electronic devices. Transferring the access data can involve transforming the first access code into a second access code that can include data representing a device identifier associated with the second electronic device. Transforming the first access code into the second access code can facilitate access to a resource associated with the access data for a second user, but not for a first user.
1. A computer-implemented method, comprising:
detecting, at a mobile device, a first feature of a physical manifestation of an access right to a resource, the first feature being detected from a digital signal, wherein the first feature of the physical manifestation of the access right includes a first machine-readable code enabling access to the resource;
decrypting the first machine-readable code using a key to produce a decrypted code;
transmitting, from the mobile device, the decrypted code to a remote server for evaluating a transformation eligibility;
receiving, at the mobile device, a transformation eligibility indication indicating whether or not the physical manifestation is eligible for transforming into a digital manifestation of the access right to the resource;
in response to the transformation eligibility indication indicating that the physical manifestation of the access right is eligible for transformation, transmitting, from the mobile device, a request to transform the physical manifestation of the access right into the digital manifestation of the access right;
receiving, from the remote server, a response to the request indicating that the transformation has occurred and that the physical manifestation of the access right has been invalidated; and
displaying, at a display of the mobile device, a visual representation of the response to the request indicating that the physical manifestation of the access right has been transformed into the digital manifestation and that the physical manifestation of the access right has been invalidated.
2. The computer-implemented method of claim 1 , wherein the response further indicates that a second machine-readable code has been generated, and wherein the second machine-readable code corresponds to the digital manifestation of the access right and is valid to grant access to the resource.
3. The computer-implemented method of claim 1 , wherein transforming the physical manifestation of the access right to the digital manifestation of the access right includes:
generating a valid identifier for the digital manifestation of the access right, the valid identifier uniquely identifying the access right;
generating a second machine-readable code, the second machine-readable code corresponding to the valid identifier of the digital manifestation of the access right; and
invalidating the physical manifestation of the access right by:
storing an invalid indicator associated with the identifier of the physical manifestation of the access right; or
deleting the identifier of the physical manifestation of the access right from a data store.
4. The computer-implemented method of claim 3 , wherein the invalid indicator inhibits the physical manifestation of the access right from granting access to the resource.
5. The computer-implemented method of claim 1 , wherein the request includes the first feature, and wherein the response includes the transformation eligibility indication.
6. A system, comprising:
one or more processors; and
a non-transitory computer-readable storage medium containing instructions which, when executed on the one or more processors, cause the one or more processors to perform operations including:
detecting a first feature of a physical manifestation of an access right to a resource, the first feature being detected from a digital signal, wherein the first feature of the physical manifestation of the access right includes a first machine-readable code enabling access to the resource;
decrypting the first machine-readable code using a key to produce a decrypted code;
transmitting the decrypted code to a remote server for evaluating a transformation eligibility;
receiving a transformation eligibility indication indicating whether or not the physical manifestation is eligible for transforming into a digital manifestation of the access right to the resource;
in response to the transformation eligibility indication indicating that the physical manifestation of the access right is eligible for transformation, transmitting a request to transform the physical manifestation of the access right into the digital manifestation of the access right;
receiving a response to the request indicating that the transformation has occurred and that the physical manifestation of the access right has been invalidated; and
displaying a visual representation of the response to the request indicating that the physical manifestation of the access right has been transformed into the digital manifestation and that the physical manifestation of the access right has been invalidated.
7. The system of claim 6 , wherein the response further indicates that a second machine-readable code has been generated, and wherein the second machine-readable code corresponds to the digital manifestation of the access right and is valid to grant access to the resource.
8. The system of claim 6 , wherein transforming the physical manifestation of the access right to the digital manifestation of the access right includes:
generating a valid identifier for the digital manifestation of the access right, the valid identifier uniquely identifying the access right;
generating a second machine-readable code, the second machine-readable code corresponding to the valid identifier of the digital manifestation of the access right; and
invalidating the physical manifestation of the access right by:
storing an invalid indicator associated with the identifier of the physical manifestation of the access right; or
deleting the identifier of the physical manifestation of the access right from a data store.
9. The system of claim 8 , wherein the invalid indicator inhibits the physical manifestation of the access right from granting access to the resource.
10. The system of claim 6 , wherein the request includes the first feature, and wherein the response includes the transformation eligibility indication.
11. A computer-program product tangibly embodied in a non-transitory machine-readable storage medium, including instructions configured to cause a processing apparatus to perform operations including:
detecting, at a mobile device, a first feature of a physical manifestation of an access right to a resource, the first feature being detected from a digital signal, wherein the first feature of the physical manifestation of the access right includes a first machine-readable code enabling access to the resource;
decrypting the first machine-readable code using a key to produce a decrypted code;
transmitting, from the mobile device, the decrypted code to a remote server for evaluating a transformation eligibility;
receiving, at the mobile device, a transformation eligibility indication indicating whether or not the physical manifestation is eligible for transforming into a digital manifestation of the access right to the resource;
in response to the transformation eligibility indication indicating that the physical manifestation of the access right is eligible for transformation, transmitting, from the mobile device, a request to transform the physical manifestation of the access right into the digital manifestation of the access right;
receiving, from the remote server, a response to the request indicating that the transformation has occurred and that the physical manifestation of the access right has been invalidated; and
displaying, at a display of the mobile device, a visual representation of the response to the request indicating that the physical manifestation of the access right has been transformed into the digital manifestation and that the physical manifestation of the access right has been invalidated.
12. The computer-program product of claim 11 , wherein the response further indicates that a second machine-readable code has been generated, and wherein the second machine-readable code corresponds to the digital manifestation of the access right and is valid to grant access to the resource.
13. The computer-program product of claim 11 , wherein transforming the physical manifestation of the access right to the digital manifestation of the access right includes:
generating a valid identifier for the digital manifestation of the access right, the valid identifier uniquely identifying the access right;
generating a second machine-readable code, the second machine-readable code corresponding to the valid identifier of the digital manifestation of the access right; and
invalidating the physical manifestation of the access right by:
storing an invalid indicator associated with the identifier of the physical manifestation of the access right; or
deleting the identifier of the physical manifestation of the access right from a data store.
14. The computer-program product of claim 13 , wherein the invalid indicator inhibits the physical manifestation of the access right from granting access to the resource.
15. The computer-program product of claim 11 , wherein the request includes the first feature, and wherein the response includes the transformation eligibility indication.