US 12,265,957 B2
Methods and systems for pre-validating token-based access control
Brent Marshall, Kitchener (CA); and Nicole Sandford, Kitchener (CA)
Assigned to Shopify Inc., Ottawa (CA)
Filed by Shopify Inc., Ottawa (CA)
Filed on Aug. 23, 2022, as Appl. No. 17/893,370.
Claims priority of provisional application 63/358,571, filed on Jul. 6, 2022.
Prior Publication US 2024/0013199 A1, Jan. 11, 2024
Int. Cl. G06Q 20/00 (2012.01); G06Q 20/32 (2012.01); G06Q 20/36 (2012.01); G06Q 20/38 (2012.01); H04L 9/00 (2022.01)
CPC G06Q 20/367 (2013.01) [G06Q 20/3278 (2013.01); G06Q 20/38215 (2013.01); G06Q 20/3825 (2013.01); H04L 9/50 (2022.05)] 20 Claims
OG exemplary drawing
 
1. A computer-implemented method, comprising:
during a pre-authentication stage during a session with a user device,
receiving, from the user device, at a computing system, a digital signature and a wallet address;
validating the digital signature to authenticate the wallet address and, based on validation, storing, at the computing system, the wallet address in association with an identifier, wherein the identifier is also stored on the user device;
after the session terminates and during an on-location access stage,
receiving, at an on-location computing device coupled to the computing system, from the user device, over short-range, an access request including identification data, the identification data purporting to be based on the identifier, wherein the identification data is generated by the user device using the identifier and a nonce;
confirming that the identification data is based on the identifier by independently generating the nonce,
hashing the nonce together with the identifier stored in association with the wallet address to obtain a hash result, and
confirming that the hash result matches the identification data received;
responsive to confirming that the identification data is based on the identifier, retrieving the wallet address associated with the identifier;
determining, based on blockchain data from a blockchain network, that the wallet address is associated with one or more tokens and that the one or more tokens satisfy an access condition associated with the access request; and
responsive to determining that the wallet address is associated with the one or more tokens and that the one or more tokens satisfy the access condition associated with the access request, performing an action.