US 12,067,071 B2
QR code access restriction without geolocation knowledge
Tam Nguyen, Rowlett, TX (US); Gerardo Fang, El Paso, TX (US); and Venkata Sudharsan Dasa, Frisco, TX (US)
Assigned to Capital One Services, LLC, McLean, VA (US)
Filed by Capital One Services, LLC, McLean, VA (US)
Filed on Feb. 19, 2021, as Appl. No. 17/179,728.
Prior Publication US 2022/0269747 A1, Aug. 25, 2022
Int. Cl. G06F 16/955 (2019.01); H04L 9/32 (2006.01); H04L 67/01 (2022.01); H04L 67/146 (2022.01)
CPC G06F 16/9554 (2019.01) [H04L 9/3228 (2013.01); H04L 67/01 (2022.05); H04L 67/146 (2013.01)] 21 Claims
OG exemplary drawing
 
1. A method for controlling access to a website, comprising:
receiving a request from a mobile device to access the website, wherein the request is received as a result of the mobile device scanning a machine-readable indicia;
determining a geolocation that corresponds to the machine-readable indicia;
directing the mobile device to a backend redirect page corresponding to the geolocation that does not visibly load to the mobile device, wherein the backend redirect page is configured to generate a unique session identifier for the website;
starting a session timer for the unique session identifier;
generating a dynamic address for the website including the unique session identifier generated by the backend redirect page;
redirecting, by the backend redirect page and responsive to receiving the request from the mobile device to access the website as the result of scanning the machine-readable indicia, a browser on the mobile device to the website using the dynamic address, wherein the website has one or more pages;
verifying, by an intake backend for frontend (IBFF), whether the unique session identifier for the dynamic address is valid by extracting the unique session identifier from the dynamic address;
based on the verifying, either granting or denying, by the IBFF, the mobile device access to the website, wherein granting access occurs when the unique session identifier is valid, and denying access occurs when the unique session identifier is invalid.