IP Library Granted Patent US 12,316,633
Granted Patent B2
US 12,316,633 · App. 17/867,975 · Granted May 27, 2025

Methods and systems for access control in a computing system

Inventor: John Jong-Suk Lee (Waterloo, CA)
Assignee: Shopify Inc.
H04L63/10
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,316,633
App. No.
17/867,975
Granted
May 27, 2025
Kind
B2
Abstract

Methods and systems for access control in an online environment, such as an e-commerce platform. The system receives a designation of a non-fungible token (NFT) collection in connection with a merchant account, each NFT having a respective combination of attributes. An association is detected between a product record and a combination of two or more of the attributes and the system automatically generates an access rule with regard to the product record that is conditional on ownership of an NFT in the collection that has the combination of the two or more attributes. When a request for access is received, the access rule is applied to provide a user device with access to the one or more product records based on verification of the ownership by the user device of an NFT that meets the condition.

Claims (53)

1. A computer-implemented method, comprising:

receiving, at a server, a designation of a non-fungible token collection in connection with a merchant account, each non-fungible token in the non-fungible token collection having a respective combination of non-fungible token attributes;

detecting an association between one or more product records and a combination of two or more of the non-fungible token attributes;

automatically generating an access rule with regard to the one or more product records, wherein the access rule is conditional on ownership of one of the non-fungible tokens of the non-fungible token collection that has the combination of the two or more of the non-fungible token attributes; and

applying the access rule to provide a user device with access to the one or more product records based on verification of the ownership of the one of the non-fungible tokens by the user device, wherein the verification of the ownership of the one of the non-fungible tokens by the user device includes:

receiving, from the user device, at least an NFT identifier;

querying a blockchain regarding the NFT identifier;

receiving, from the blockchain, non-fungible token data associated with the NFT identifier including ownership data that includes a wallet identifier; and

verifying that the wallet identifier in the ownership data matches a user device wallet identifier.

2. The computer-implemented method of claim 1 , wherein detecting the association includes:

detecting a newly-minted token in the non-fungible token collection, the newly-minted token having a set of attributes that includes the combination of the two or more of the non-fungible token attributes; and

detecting a correlation between the combination of the two or more of the non-fungible token attributes and the one or more product records.

3. The computer-implemented method of claim 2 , wherein the one or more product records include product attributes, and wherein the correlation is based on matching between the product attributes and the combination of two or more of the non-fungible token attributes.

4. The computer-implemented method of claim 3 , wherein the correlation has an associated correlation metric, and wherein automatically generating is based on determining that the correlation metric exceeds a minimum confidence threshold.

5. The computer-implemented method of claim 1 , wherein verifying that the wallet identifier in the ownership data matches the user device identifier includes validating a cryptographic signature from the user device using the wallet identifier.

6. The computer-implemented method of claim 1 , wherein the non-fungible token data further includes the combination of two or more of the non-fungible token attributes.

7. The computer-implemented method of claim 1 , wherein the one or more product records relate to at least one of a discount on a product item or a limited-edition product item.

8. The computer-implemented method of claim 1 , wherein applying the access rule to provide a user device with access to the one or more product records includes providing the user device with a restricted product record for a requested product item when ownership of the one of the non-fungible tokens by the user device is verified and providing the user device with an unrestricted product record for the requested product item when ownership of the one of the non-fungible tokens by the user device cannot be verified.

9. A computing system, comprising:

one or more processing units;

one or more data storage units; and

memory storing processor-executable instructions that, when executed by the one or more processing units, are to cause the processing units to:

receive a designation of a non-fungible token collection in connection with a merchant account, each non-fungible token in the non-fungible token collection having a respective combination of non-fungible token attributes;

detect an association between one or more product records and a combination of two or more of the non-fungible token attributes;

automatically generate an access rule with regard to the one or more product records, wherein the access rule is conditional on ownership of one of the non-fungible tokens of the non-fungible token collection that has the combination of the two or more of the non-fungible token attributes; and

apply the access rule to provide a user device with access to the one or more product records based on verification of the ownership of the one of the non-fungible tokens by the user device, wherein the verification of the ownership of the one of the non-fungible tokens by the user device includes:

receiving, from the user device, at least an NFT identifier;

querying a blockchain regarding the NFT identifier;

receiving, from the blockchain, non-fungible token data associated with the NFT identifier including ownership data that includes a wallet identifier; and

verifying that the wallet identifier in the ownership data matches a user device wallet identifier.

10. The computing system of claim 9 , wherein the instructions, when executed, are to cause the processing units to detect the association by:

detecting a newly-minted token in the non-fungible token collection, the newly-minted token having a set of attributes that includes the combination of the two or more of the non-fungible token attributes; and

detecting a correlation between the combination of the two or more of the non-fungible token attributes and the one or more product records.

11. The computing system of claim 10 , wherein the one or more product records include product attributes, and wherein the correlation is based on matching between the product attributes and the combination of two or more of the non-fungible token attributes.

12. The computing system of claim 11 , wherein the correlation has an associated correlation metric, and wherein the instructions, when executed, are to cause the processing units to automatically generate the access rule based on determining that the correlation metric exceeds a minimum confidence threshold.

13. A non-transitory, computer-readable medium storing computer-executable instructions that, when executed by one or more processors, are to cause the one or more processors to:

receive a designation of a non-fungible token collection in connection with a merchant account, each non-fungible token in the non-fungible token collection having a respective combination of non-fungible token attributes;

detect an association between one or more product records and a combination of two or more of the non-fungible token attributes;

automatically generate an access rule with regard to the one or more product records, wherein the access rule is conditional on ownership of one of the non-fungible tokens of the non-fungible token collection that has the combination of the two or more of the non-fungible token attributes; and

apply the access rule to provide a user device with access to the one or more product records based on verification of the ownership of the one of the non-fungible tokens by the user device, wherein the verification of the ownership of the one of the non-fungible tokens by the user device includes:

receiving, from the user device, at least an NFT identifier;

querying a blockchain regarding the NFT identifier;

receiving, from the blockchain, non-fungible token data associated with the NFT identifier including ownership data that includes a wallet identifier; and

verifying that the wallet identifier in the ownership data matches a user device wallet identifier.

14. The non-transitory, computer-readable medium of claim 13 , the instructions, when executed, are to cause the processing units to detect the association by:

detecting a newly-minted token in the non-fungible token collection, the newly-minted token having a set of attributes that includes the combination of the two or more of the non-fungible token attributes; and

detecting a correlation between the combination of the two or more of the non-fungible token attributes and the one or more product records.

15. The non-transitory, computer-readable medium of claim 14 , wherein the one or more product records include product attributes, and wherein the correlation is based on matching between the product attributes and the combination of two or more of the non-fungible token attributes.

16. The non-transitory, computer-readable medium of claim 15 , wherein the correlation has an associated correlation metric, and wherein the instructions, when executed, are to cause the processing units to automatically generate the access rule based on determining that the correlation metric exceeds a minimum confidence threshold.

17. The computing system of claim 9 , wherein the instructions, when executed, are to cause the processing units to verify that the wallet identifier in the ownership data matches the user device identifier by validating a cryptographic signature from the user device using the wallet identifier.

18. The computing system of claim 9 , wherein the non-fungible token data further includes the combination of two or more of the non-fungible token attributes.

19. The non-transitory, computer-readable medium of claim 13 , wherein the instructions, when executed, are to cause the processing units to verify that the wallet identifier in the ownership data matches the user device identifier by validating a cryptographic signature from the user device using the wallet identifier.

20. The non-transitory, computer-readable medium of claim 13 , wherein the non-fungible token data further includes the combination of two or more of the non-fungible token attributes.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 8, 2022
From: LEE, JOHN JONG-SUK
To: SHOPIFY INC.
Reel/Frame 060745/0413 →
Continuity (4)
Provisional Application 63336816 · Apr 29, 2022
Provisional Application 63336787 · Apr 29, 2022
Provisional Application 63336798 · Apr 29, 2022
Related Publication 20230353570A1 · Nov 2, 2023
References Cited (128)
US 6401118B1 · Thomas · 2002 [cited by applicant]
US 10505726B1 · Andon et al. · 2019 [cited by applicant]
US 10929842B1 · Arvanaghi et al. · 2021 [cited by applicant]
US 11062284B1 · Cunningham et al. · 2021 [cited by applicant]
US 11075891B1 · Long · 2021 [cited by applicant]
US 11276014B2 · Augustine et al. · 2022 [cited by applicant]
US 11295363B1 · Kao et al. · 2022 [cited by applicant]
US 11443838B1 · Cordonnier · 2022 [cited by examiner]
US 11455694B2 · Dinunzio et al. · 2022 [cited by applicant]
US 11657428B1 · Ritchie · 2023 [cited by applicant]
US 20050208940A1 · Takese · 2005 [cited by applicant]
US 20070174079A1 · Kraus · 2007 [cited by applicant]
US 20100131386A1 · Shiely et al. · 2010 [cited by applicant]
US 20100235218A1 · Erhart et al. · 2010 [cited by applicant]
US 20130246146A1 · Fischer et al. · 2013 [cited by applicant]
US 20140129422A1 · Zhou · 2014 [cited by applicant]
US 20140351953A1 · Bhatia · 2014 [cited by applicant]
US 20140358629A1 · Shivaswamy et al. · 2014 [cited by applicant]
US 20150186980A1 · Wood · 2015 [cited by applicant]
US 20150249872A1 · Lee et al. · 2015 [cited by applicant]
US 20150324840A1 · Ramnath Krishnan · 2015 [cited by applicant]
US 20150363783A1 · Ronca · 2015 [cited by applicant]
US 20150363858A1 · Kleinhandler et al. · 2015 [cited by applicant]
US 20160171534A1 · Linden · 2016 [cited by applicant]
US 20160210674A1 · Allen et al. · 2016 [cited by applicant]
US 20160292672A1 · Fay et al. · 2016 [cited by applicant]
US 20170011460A1 · Molinari et al. · 2017 [cited by applicant]
US 20170116693A1 · Rae · 2017 [cited by applicant]
US 20170140408A1 · Wuehler · 2017 [cited by applicant]
US 20170155515A1 · Androulaki et al. · 2017 [cited by applicant]
US 20170221029A1 · Lund et al. · 2017 [cited by applicant]
US 20170330174A1 · Demarinis · 2017 [cited by applicant]
US 20170357966A1 · Chandrasekhar et al. · 2017 [cited by applicant]
US 20180108036A1 · Laufenberg et al. · 2018 [cited by applicant]
US 20180150869A1 · Finnegan · 2018 [cited by applicant]
US 20190066065A1 · Wright et al. · 2019 [cited by applicant]
US 20190073666A1 · Ortiz et al. · 2019 [cited by applicant]
US 20190130439A1 · Handrigan et al. · 2019 [cited by applicant]
US 20190139136A1 · Molinari et al. · 2019 [cited by applicant]
US 20190164157A1 · Balaraman · 2019 [cited by applicant]
US 20190220836A1 · Caldwell · 2019 [cited by applicant]
US 20190220917A1 · Busjaeger · 2019 [cited by applicant]
US 20190266616A1 · Strutton · 2019 [cited by applicant]
US 20190294817A1 · Hennebert · 2019 [cited by applicant]
US 20190303892A1 · Yantis et al. · 2019 [cited by applicant]
US 20190311341A1 · Rice · 2019 [cited by applicant]
US 20200005284A1 · Vijayan · 2020 [cited by applicant]
US 20200053081A1 · Park et al. · 2020 [cited by applicant]
US 20200112446A1 · Yoshihama · 2020 [cited by applicant]
US 20200134660A1 · Kadaster · 2020 [cited by applicant]
US 20200153607A1 · Shi et al. · 2020 [cited by applicant]
US 20200242105A1 · Rich et al. · 2020 [cited by applicant]
US 20200244752A1 · Trainor · 2020 [cited by applicant]
US 20200364703A1 · Joveski · 2020 [cited by applicant]
US 20200379981A1 · Yoon · 2020 [cited by applicant]
US 20210014042A1 · Sivathanu · 2021 [cited by applicant]
US 20210124616A1 · Verma · 2021 [cited by applicant]
US 20210241351A1 · Francis et al. · 2021 [cited by applicant]
US 20210243201A1 · Tandel · 2021 [cited by applicant]
US 20210256070A1 · Tran · 2021 [cited by applicant]
US 20210366586A1 · Ryan et al. · 2021 [cited by applicant]
US 20210383334A1 · Krasnyansky · 2021 [cited by applicant]
US 20210390531A1 · Voorhees · 2021 [cited by applicant]
US 20220035936A1 · Lin · 2022 [cited by applicant]
US 20220058633A1 · Yantis · 2022 [cited by applicant]
US 20220076279A1 · Renaud · 2022 [cited by applicant]
US 20220101316A1 · Cramer · 2022 [cited by applicant]
US 20220198418A1 · Kang · 2022 [cited by applicant]
US 20220210061A1 · Simu · 2022 [cited by applicant]
US 20220222364A1 · Roberts · 2022 [cited by examiner]
US 20220292490A1 · Collen · 2022 [cited by applicant]
US 20220318233A1 · Martinez · 2022 [cited by applicant]
US 20220351187A1 · Kim · 2022 [cited by applicant]
US 20220398340A1 · Jakobsson · 2022 [cited by applicant]
US 20230043095A1 · Miliam · 2023 [cited by applicant]
US 20230062776A1 · Vosseller · 2023 [cited by examiner]
US 20230073545A1 · Kurian · 2023 [cited by applicant]
US 20230079195A1 · Matheson · 2023 [cited by applicant]
US 20230086191A1 · Jakobsson · 2023 [cited by applicant]
US 20230195855A1 · Mavromatis · 2023 [cited by applicant]
US 20230206218A1 · Defour · 2023 [cited by applicant]
US 20230306412A1 · Gaur · 2023 [cited by applicant]
US 20230360029A1 · Pranger · 2023 [cited by applicant]
US 20240020682A1 · Castagna · 2024 [cited by applicant]
US 20240037593A1 · Navon · 2024 [cited by applicant]
US 20240039369A1 · Shenoy et al. · 2024 [cited by applicant]
US 20240039722A1 · Deluca · 2024 [cited by applicant]
US 20240046074A1 · Lewis · 2024 [cited by applicant]
CN 110111102 · 2019 [cited by applicant]
CN 110490752 · 2019 [cited by applicant]
CN 108364173 · 2021 [cited by applicant]
CN 109272380 · 2023 [cited by applicant]
EP 3748914 · 2020 [cited by applicant]
EP 4148643A1 · 2023 [cited by applicant]
RU 2018132715A · 2020 [cited by applicant]
TW 1674543 · 2019 [cited by applicant]
WO 2013111142A2 · 2013 [cited by applicant]
WO 2016202952 · 2016 [cited by applicant]
WO 2017197110 · 2017 [cited by applicant]
WO 2020092900 · 2020 [cited by applicant]
WO 2022204404 · 2022 [cited by applicant]
US Office Action, U.S. Appl. No. 17/475,240 dated May 9, 2024. [cited by applicant]
Xingxiong Zhu et al; “Application of Blockchain in Document Certification, Asset Trading and Payment Reconciliation”; Journal of Physics: Conference Series, vol. 1187, Issue 5. [cited by applicant]
US Office Action dated Jul. 11, 2023, U.S. Appl. No. 17/475,240. [cited by applicant]
US Office Action, U.S. Appl. No. 17/473,284, filed Sep. 21, 2023. [cited by applicant]
US Office Action dated Feb. 23, 2024; U.S. Appl. No. 17/893,370. [cited by applicant]
European Search Report dated Oct. 10, 2022, EP Application No. 22169579.4. [cited by applicant]
Sep. 10, 2021, XP055966676, Retrieved from the Internet: URL: http://en.wikipedia.org/w/index.php?title=Non-fungible_token&oldid=3593775#Collectibles. [cited by applicant]
US Office Action dated Oct. 17, 2022, U.S. Appl. No. 17/344,251. [cited by applicant]
USPTO; Office Action relating to U.S. Appl. No. 17/955,631 dated Apr. 15, 2024. [cited by applicant]
Antonopoulos, Andreas; “Mastering Bitcoin Unlocking Digital Cryto-Currencies”; O'Reilly Media, Inc., all pages (Year: 2014). [cited by applicant]
US Office Action dated Apr. 21, 2021, U.S. Appl. No. 16/782,561. [cited by applicant]
US Office Action dated Oct. 7, 2021, U.S. Appl. No. 16/782,561. [cited by applicant]
US Office Action dated Jan. 20, 2022, U.S. Appl. No. 16/782,561. [cited by applicant]
US Office Action dated Jul. 26, 2022, U.S. Appl. No. 16/782,561. [cited by applicant]
Office Action dated Nov. 25, 2022, U.S. Appl. No. 16/782,561. [cited by applicant]
Office Action dated Apr. 14, 2023, U.S. Appl. No. 16/782,561. [cited by applicant]
Dialog, Online Searcher, To Be Or Not to Be Competitive Intelligence Tools, Aug. 2019. [cited by applicant]
US Office Action dated Jul. 27, 2021, U.S. Appl. No. 16/782,556. [cited by applicant]
US Office Action dated Mar. 6, 2023, U.S. Appl. No. 17/479,650. [cited by applicant]
US Office Action, U.S. Appl. No. 17/903,109, filed Jun. 3, 2024. [cited by applicant]
PCT Supplementary International Search Report relating to Application No. PCT/CA2023/050452 dated Jul. 12, 2024. [cited by applicant]
G. Gan, E. Chen, Z. Zhou and Y. Zhu, “Token-Based Access Control,” in IEEE Access, vol. 8, pp. 54189-54199, 2020, doi: 10.1109 /ACCESS.2020.2979746. (Year: 2020). [cited by applicant]
Rafati et al., “DeTi: A Decentralized Ticketing Management Platform,” J Netw Syst Manage, 2022, 30(4):62. doi: 10.1007/s10922-022-09675-3. Epub Jul. 26, 2022. PMCID: PMC9315850. (Year: 2022). [cited by applicant]
Regner et al., “NFTs in Practice—Non-Fungible Tokens as Core Component of a Blockchain-based Event Ticketing Application.” retrieved from https://www. researchgate.neUpublication/336057493_N FTs_in_Practice_-_ Non-Fungi… [cited by applicant]
Feulner et al., “Exploring the use of self-sovereign identity for event ticketing systems,” Electron Mark, 2022, 32(3):1759-1777. doi: 10.1007/s12525-022-00573-9. Epub Jul. 30, 2022. PMID: 35965736; PMCID: PMC9361939. (… [cited by applicant]
US Office Action dated Sep. 20, 2024, U.S. Appl. No. 17/955,631. [cited by applicant]
US Office Action dated Sep. 25, 2024, U.S. Appl. No. 17/866,746. [cited by applicant]