Granted Patent B2

US 12,265,957 · App. 17/893,370 · Granted Apr 1, 2025

Inventors: Brent Marshall (Kitchener, CA); Nicole Sandford (Kitchener, CA)

Assignee: Shopify Inc.

G06Q20/367G06Q20/3278G06Q20/38215G06Q20/3825H04L9/50

Abstract

Claims (57)

1. A computer-implemented method, comprising:

during a pre-authentication stage during a session with a user device,

receiving, from the user device, at a computing system, a digital signature and a wallet address;

validating the digital signature to authenticate the wallet address and, based on validation, storing, at the computing system, the wallet address in association with an identifier, wherein the identifier is also stored on the user device;

after the session terminates and during an on-location access stage,

receiving, at an on-location computing device coupled to the computing system, from the user device, over short-range, an access request including identification data, the identification data purporting to be based on the identifier, wherein the identification data is generated by the user device using the identifier and a nonce;

confirming that the identification data is based on the identifier by independently generating the nonce,

hashing the nonce together with the identifier stored in association with the wallet address to obtain a hash result, and

confirming that the hash result matches the identification data received;

responsive to confirming that the identification data is based on the identifier, retrieving the wallet address associated with the identifier;

determining, based on blockchain data from a blockchain network, that the wallet address is associated with one or more tokens and that the one or more tokens satisfy an access condition associated with the access request; and

responsive to determining that the wallet address is associated with the one or more tokens and that the one or more tokens satisfy the access condition associated with the access request, performing an action.

2. The method of claim 1 , wherein the access request is received from the user device via a short-range communication module in the on-location computing device coupled to the computing system.

3. The method of claim 2 , wherein performing an action includes outputting a success signal at the on-location computing device coupled to the computing system.

4. The method of claim 3 , wherein outputting includes outputting an audio-visual signal on the on-location computing device.

5. The method of claim 1 , wherein the on-location computing device includes a scanning device and wherein the identification data includes a hash of the identifier.

6. The method of claim 5 , wherein the scanning device includes an optical scanning device configured to obtain a QR code displayed on the user device, wherein the QR code encodes the identification data.

7. The method of claim 1 , wherein the nonce is time-based.

8. The method of claim 1 , wherein storing includes storing the wallet address and the identifier in association with a user identifier, wherein receiving the access request further includes receiving the user identifier, and wherein confirming further includes retrieving the identifier from memory based on the user identifier.

9. The method of claim 8 , wherein the user identifier includes a device identifier or a user account identifier for a user account on the computing system.

10. The method of claim 9 , wherein the computing system is an e-commerce system, the user identifier is the user account identifier for the user account on the e-commerce system, and wherein the user account identifier is associated with an e-commerce application on the user device.

11. The method of claim 1 , wherein the on-location computing device includes an image sensor and receiving includes detecting a machine-readable code displayed on a display screen of the user device.

12. The method of claim 11 , wherein the on-location computing device is one of an automated turnstile, a handheld scanning device, a smartphone, a tablet, or a point-of-sale device.

13. The method of claim 1 , wherein the access request includes a request to obtain a limited access item or a request to enter a limited access event.

14. A computing system, comprising:

one or more processing units;

one or more data storage units; and

memory storing processor-executable instructions that, when executed by the one or more processing units, are to cause the processing units to:

during a pre-authentication stage during a session with a user device,

receive, from the user device, at the computing system, a digital signature and a wallet address;

validate the digital signature to authenticate the wallet address and, based on validation, store the wallet address in association with an identifier,

wherein the identifier is also stored on the user device;

after the session terminates and during an on-location access stage,

receive, at an on-location computing device coupled to the computing system, from the user device, over short-range, an access request including identification data, the identification data purporting to be based on the identifier, wherein the identification data is generated by the user device using the identifier and a nonce;

confirm that the identification data is based on the identifier by independently generating the nonce,

hashing the nonce together with the identifier stored in association with the wallet address to obtain a hash result, and

confirming that the hash result matches the identification data received;

responsive to confirming that the identification data is based on the identifier, retrieve the wallet address associated with the identifier;

determine, based on blockchain data from a blockchain network, that the wallet address is associated with one or more tokens and that the one or more tokens satisfy an access condition associated with the access request; and

responsive to determining that the wallet address is associated with the one or more tokens and that the one or more tokens satisfy the access condition associated with the access request, perform an action.

15. The computing system of claim 14 , wherein the access request is received from the user device via a short-range communication module in the on-location computing device coupled to the computing system.

16. The computing system of claim 14 , wherein the on-location computing device includes an image sensor, and wherein the instructions, when executed, are to cause the one or more processing units to receive the access request by detecting a machine-readable code displayed on a display screen of the user device.

17. The computing system of claim 14 , wherein the instructions, when executed, are to cause the one or more processing units to store the wallet address and the identifier in association with a user identifier, and wherein the instructions, when executed, are to cause the one or more processing units to receive the access request by further receiving the user identifier and to retrieve the identifier from memory based on the user identifier.

18. A non-transitory computer-readable media storing processor-executable instructions, wherein the instructions, when executed, are to cause one or more processing units to:

during a pre-authentication stage during a session with a user device,

receive, from the user device, at a computing system, a digital signature and a wallet address;

validate the digital signature to authenticate the wallet address and, based on validation, store the wallet address in association with an identifier, wherein the identifier is also stored on the user device;

after the session terminates and during an on-location access stage,

receive, at an on-location computing device coupled to the computing system, from the user device, over short-range, an access request including identification data, the identification data purporting to be based on the identifier, wherein the identification data is generated by the user device using the identifier and a nonce;

confirm that the identification data is based on the identifier by independently generating the nonce,

hashing the nonce together with the identifier stored in association with the wallet address to obtain a hash result, and

confirming that the hash result matches the identification data received;

responsive to confirming that the identification data is based on the identifier, retrieve the wallet address associated with the identifier;

determine, based on blockchain data from a blockchain network, that the wallet address is associated with one or more tokens and that the one or more tokens satisfy an access condition associated with the access request; and

responsive to determining that the wallet address is associated with the one or more tokens and that the one or more tokens satisfy the access condition associated with the access request, perform an action.

19. The method claimed in claim 1 , wherein the nonce includes a time step.

20. The method claimed in claim 19 , wherein the time step is valid for a window of time.

Assignments (3)

Continuity (2)

References Cited (133)