IP Library › Granted Patent US 11,843,594

Granted Patent B2

US 11,843,594 · App. 18/070,280 · Granted Dec 12, 2023

Controlled token distribution to protect against malicious data and resource access

Inventors: Phillip Volini (Beverly Hills, CA); John Raymond Werneke (Naperville, IL); Carl Schumaier (Beverly Hills, CA); Michael Smith (Palentine, IL); Frank Giannantonio (Verona, WI); Vito Iaia (Santa Monica, CA); Sean Moriarty (Pasadena, CA)

Assignee: Live Nation Entertainment, Inc.

H04L63/0807 H04L63/08 H04L63/10

View Patent ↗

Loading inventors, assignments & file history…

Monitor This Case

Get email alerts when status or documents change.

Order Certified Copies

Most orders are placed with the USPTO same day — all within 24 business hours.

Order via The Patent Place →

Pre-filled with this patent's details

Quick Facts

Patent No.: US 11,843,594
App. No.: 18/070,280
Granted: Dec 12, 2023
Kind: B2

External Links

USPTO Patent Center↗ Full Patent PDF↗

Abstract

Techniques are described for controlling data and resource access. For example, methods and systems can facilitate controlled token distribution across systems and token processing in a manner so as to limit access to and to protect data that includes access codes.

Claims (106)

1. A resource management system for generating and transmitting tokens associated with resources, the resource management system comprising:

a communication engine comprising a processor, wherein the processor is configured to:

receive a first credential associated with a first system by the first system;

generate a first token in response to receiving the first credential;

transmit the first token to the first system;

receive a second credential associated with a second system by the second system;

generate a second token in response to receiving the second credential, wherein the first token and the second token are associated with an access right to access a resource;

transmit the second token to the second system, wherein:

the first system is configured to allocate the access right to a first user based on the first token, and

the second system is configured to allocate the access right to a second user based on the second token;

receive a communication from the first system regarding establishing a priority to access to the resource to the first user;

inhibit allocation of the second token by the second system to the second user based on the communication from the first system; and

transmit an access-enabling code to the first system, wherein the access-enabling code provides access to the resource.

2. The resource management system according to claim 1 , wherein the processor is further configured to:

authenticate the first credential and the second credential based on information of the first system and the second system stored in a storage device; and

generate the first token and the second token in response to authenticating the first credential and the second credential.

3. The resource management system according to claim 1 , wherein, to generate the first token, the processor is further configured to:

identify a key available to the first system;

generate a first claim value that is indicative of an event;

generate a second claim value that is indicative of a characteristic for accessing the event;

generate an alphanumeric string as the first token that includes the first claim value and the second claim value; and

encrypt the first token using the key.

4. The resource management system according to claim 1 , wherein the first token includes an expiry date or time, and the processor is further configured to:

transmit an expiration communication to the first system indicating that the first token has been expired; and

update a token data store to change a status of the first token as expired.

5. The resource management system according to claim 1 , wherein the processor is further configured to:

transmit the first token to the first system at a first time;

receive the first token from the first system at a second time later than the first time, wherein the first system has received request from the first user to assign the access right to the resource;

identify the resource corresponding to the first token after receiving the first token at the second time;

determine that the first token corresponds to the first system; and

transmit the access-enabling code to the first system in response to determining that the first token corresponds to the first system.

6. The resource management system according to claim 1 , wherein the processor is further configured to access a look up table to identify the access-enabling code corresponding to the first token.

7. The resource management system according to claim 1 , further comprising the first system, wherein the first system is configured to:

transmit specifications of the resource to a user device associated with the first user;

receive selection of the resource and intention of the first user to establish the priority to access the resource from the user device; and

transmit, to the communication engine, the communication regarding establishing the priority to access to the resource to the first user based on the selection of the resource.

8. The resource management system according to claim 7 , wherein the first system is further configured to:

collect payment information from the user device; and

authorize the payment information before transmitting the communication to the communication engine.

9. The resource management system according to claim 1 , wherein the processor is further configured to:

detect that a user device associated with the first user is within a prescribed geographical area associated with the resource;

detect a lapse of a threshold time from a time of entrance of the user device within the prescribed geographical area; and

transmit the access-enabling code to the first system based on the lapse of the threshold time.

10. A resource management method, by a communication engine, for generating and transmitting tokens associated with resources, the resource management method comprising:

receiving a first credential associated with a first system by the first system;

generating a first token in response to receiving the first credential;

transmitting the first token to the first system;

receiving a second credential associated with a second system by the second system;

generating a second token in response to receiving the second credential, wherein the first token and the second token are associated with an access right to access a resource;

transmitting the second token to the second system, wherein:

the first system is configured to allocate the access right to a first user based on the first token, and

the second system is configured to allocate the access right to a second user based on the second token;

receiving a communication from the first system regarding establishing a priority to access to the resource to the first user;

inhibiting allocation of the second token by the second system to the second user based on the communication from the first system; and

transmitting an access-enabling code to the first system, wherein the access-enabling code provides access to the resource.

11. The resource management method according to claim 10 , further comprising:

authenticating the first credential and the second credential based on information of the first system and the second system stored in a storage device; and

generating the first token and the second token in response to authenticating the first credential and the second credential.

12. The resource management method according to claim 10 , further comprising:

identifying a key available to the first system;

generating a first claim value that is indicative of an event;

generating a second claim value that is indicative of a characteristic for accessing the event;

generating an alphanumeric string as the first token that includes the first claim value and the second claim value; and

encrypting the first token using the key.

13. The resource management method according to claim 10 , wherein:

the first token includes an expiry date or time, and

the resource management method further comprising:

transmitting an expiration communication to the first system indicating that the first token has been expired; and

updating a token data store to change a status of the first token as expired.

14. The resource management method according to claim 10 , further comprising:

transmitting the first token to the first system at a first time;

receiving the first token from the first system at a second time later than the first time, wherein the first system has received request from the first user to assign the access right to the resource;

identifying the resource corresponding to the first token after receiving the first token at the second time;

determining that the first token corresponds to the first system; and

transmitting the access-enabling code to the first system in response to determining that the first token corresponds to the first system.

15. The resource management method according to claim 10 , further comprising accessing a look up table to identify the access-enabling code corresponding to the first token.

16. The resource management method according to claim 10 , further comprising:

detecting that a user device associated with the first user is within a prescribed geographical area associated with the resource;

detecting a lapse of a threshold time from a time of entrance of the user device within the prescribed geographical area; and

transmitting the access-enabling code to the first system based on the lapse of the threshold time.

17. A computer-program product tangibly embodied in a non-transitory machine-readable storage medium, including instructions configured to cause a communication engine of a resource management system to perform operations including: